maxmind/ccfd-api-php — pull request #11 by JakubKohout (2014-07-13 00:11:12+00:00)
Title: Security issue - possible MITM attack

Hello,
I noticed that for curl connection is disabled option CURLOPT_SSL_VERIFYHOST. It could make a possibility of man-in-the-man attack because curl does not verify server's certificate.

I have enabled this option and created dependency on Kdyby\CaCurl which provides CA certificate from mozzila.org with autoupdate command.