alphagov/gds-sso — pull request #34 by alext (2014-01-22 09:39:42+00:00)
Title: Let's actually verify SSL certs when talking to signon.

This reverts the change made in 9262d94221a46ad9329a5a4040cb71cbe5fdc1f7 back when we didn't have valid SSL certs in preview.

This is not a major security issue because this only applies to requests between a client application and the authorization server. These requests are internal to our data centre, and don't cross an untrusted network. Were that not the case, this would be more of an issue.