Yes? The session layer should confirm and only accept that the other SSL-endpoint is an authenticated app. The app should do this as well. If a toggle box exi

Yes? The session layer should confirm and only accept that the other SSL-endpoint is an authenticated app. The app should do this as well. If a toggle box exists that can cause this, I'd wonder how much of else of the implementation is worth saving.