SSL verification is disabled by default

[Keno]

AWSCore.jl/src/http.jl

Line 53 in 9c0da7b

require_ssl_verification=false,

That seems potentially bad, since it opens connections up to active MITM.

[mattBrzezinski]

I'm a bit confused with the naming and what is actually going on here.

https://github.com/JuliaWeb/HTTP.jl/blob/6f262e64d3c0ef07d9bd8b9848afc07540b9bb22/src/HTTP.jl#L134

Also this post:

https://discourse.julialang.org/t/slow-http-jl-requests-when-ssl-is-enabled/36183

--

I can take a look into this further in the next couple of days.