Why aren't we verifying ssl? This seems like a bad idea.