intridea/redfinger — pull request #17 by wilkie (2013-03-21 02:59:01+00:00)
Title: Security Fix: Verify SSL certificates

rest-client does not by-default check the ssl certificates: https://github.com/rest-client/rest-client/issues/139 Which is kinda ridiculous.

This is a requirement for Webfinger, obviously, as you need to ensure integrity when pulling the xrd. This ensures that when the ssl flag is set in redfinger, that it also sends the verification peer tag to rest-client.

This is VERY important. I have made this change and it is being used in production on rstat.us. It is stable.

I bumped the version only to promote the deployment of this fix as soon as possible. Apologies for the assertiveness. :)