Your suggestion would definitely be more efficient. I’d split the difference and just say the server could just abort startup if it can’t validate its own cert

Your suggestion would definitely be more efficient. I’d split the difference and just say the server could just abort startup if it can’t validate its own cert. Letting servers indiscriminately connect to the internet isn’t great security practice, something that was substantially reinforced with the recent log4j issue.