That's a good point, and a tool like this probably really should be verifying the host. (To the author) See http://stackoverflow.com/questions/1087227/validate

That's a good point, and a tool like this probably really should be verifying the host. (To the author) See http://stackoverflow.com/questions/1087227/validate-ssl-certificates-with-python http://stackoverflow.com/questions/1087227/validate-ssl-cert... for multiple options to accomplish this.