That cURL allowed this has resulted in unprecedented compromise of personal information, credit card data and caused extreme harm to the ecosystem. (See IN11-003/PeerJacking) Browsers don't allow it for mechanisms they control, (all browsers installed signed updates for example)... and you cant disable tls/ssl and still use https scheme in any browser I know of. No commercial browser will communicate on port 443 with peer verification disabled.