You'd be surprised how much code out there "uses SSL" but to get it to "just work", it outright ignores things like DN checking, certificate expiry, even chain

You'd be surprised how much code out there "uses SSL" but to get it to "just work", it outright ignores things like DN checking, certificate expiry, even chain verification. It's on the faulty premise that encryption is the only thing that's important.