Hi, Here is a script showing the insecure default when using HTTP::Thin. Kind regards Felix Lechner * * * #!/usr/bin/perl use 5.12.1; use HTTP::Request::Common; use HTTP::Thin; say HTTP::Thin->new()->request(GET 'https://self-signed.badssl.com/')->as_string;