So, `-k` in curl is like the "I don’t care about SSL" button. It’s great for testing, but yeah, it’s risky in prod.
I’ve used it for local dev stuff where the certs are self-signed, but I’d never use it for anything public.
If you’re looking for a safer way, maybe try `curl --cacert` to specify a custom CA cert or use Let’s Encrypt to get valid certs.
I’ve used it for local dev stuff where the certs are self-signed, but I’d never use it for anything public.
If you’re looking for a safer way, maybe try `curl --cacert` to specify a custom CA cert or use Let’s Encrypt to get valid certs.
