socket implementation, no auto verify, otherwise we get spaaaam