puppetlabs/puppet — pull request #3124 by seanknox (2014-09-26 01:32:16+00:00)
Title: (PUP-3346) Don't allow insecure SSL connections w/curl

The appdmg and pkgdmg providers were calling curl with -k (—-insecure)
which allows curl'ing over insecure HTTPS connections. I can't see why
this would ever be desired, and many connections will often fail when
attempting establish a connection.

This removes the insecure option.