https://nalar.dev/tags/transport-security/ Recent content in Transport Security on Nalar Hugo en-us Fri, 11 Sep 2026 00:00:00 +0700 https://nalar.dev/keep-tls-certificate-verification-enabled/ Fri, 11 Sep 2026 00:00:00 +0700 https://nalar.dev/keep-tls-certificate-verification-enabled/ <p>An HTTPS client does more than encrypt bytes. During the TLS handshake, it also checks evidence about the server&rsquo;s identity. If application code disables those checks, the connection can remain encrypted while being connected to an unintended endpoint.</p> <p>That distinction is central to secure TLS use. Encryption protects data against passive observation, but authenticated encryption to the wrong peer does not establish the identity the application intended to contact.</p> <p>The practical rule is: <strong>keep certificate-chain and hostname verification enabled, and repair trust configuration instead of bypassing verification</strong>.</p>