Re: pkg_add and TLS

[Joerg Sonnenberger <joerg%bec.de@localhost>]

On Sun, Jul 02, 2017 at 02:06:50PM +0100, Benny Siegert wrote:
> > Given that NetBSD ships with no CA roots, I never bothered to add the
> > necessary verification. It would have been more harmful.
> 
> I disagree that it would have been more harmful, as long as cert
> verification is skipped when no certificates are present. Using HTTPS
> with no way to verify certificates is a bad idea.

I quite disagree. Failing to do certification verification in some
situations is certainly far more harmful.

Joerg