@ShawnHooper noting that this means php won’t verify SSL though, so opens up door to spoof if used in prod.