zendframework/zf2 — pull request #2110 by padraic (2012-08-05 14:23:09+00:00)
Title: Set SSL Context in HTTP Client's Socket adapter to use verify_peer===TRUE by default

Not performing SSL server verification leaves the adapter vulnerable to Man-In-The-Middle attacks by default. Curl adapter is not impacted as it enables peer verification by default and it must be deliberately disable for that adapter.