>most example code for SSL socket factories just disable TLS validation entirely. I see this happen in large enterprise far more often than it should, like the

>most example code for SSL socket factories just disable TLS validation entirely. I see this happen in large enterprise far more often than it should, like the kind of business where disabling SSL is a baaaad idea for the kind of attacks they're apt to get.