leezu commented on issue #11546: Add verify_ssl option to gluon.utils.download
URL: https://github.com/apache/incubator-mxnet/pull/11546#issuecomment-402359384
 
 
   @marcoabreu I agree that checking SSL certificates is important in general 
and should be (and is) the default. Still, when providing a utility function in 
gluon, we should let users judge and give them the option to disable SSL 
verification when necessary. For example, when SHA1 hashes of the to be 
downloaded files are hardcoded, the authenticity of the files can be verified 
based on the hash and little is lost by disabling SSL verification.
   
   Again, I do not advocate to disable SSL support in general. However, there 
may be cases (such as external files which we must not redistribute hosted on a 
misconfigured server) where it is useful to disable SSL certificate 
verification.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to