Try not verifying tls

[maalur]

No description provided.

[JZebra]

@maalur what do you think about this?

I don't feel great about merging it. This creates a vulnerability to MITM attacks. It's not public facing though, so we have some security through obscurity. Have we tried other options?

[maalur]

@JZebra yea, it's not a great solution, but I couldn't figure out anything else at the time and the exposure is pretty low since it's just the slack connection.

I think there were SSL upgrades that went out recently and older libraries don't support the newer certificates. So we could try updating our ruby version and networking libraries to fix this. But we might be blocked on that due to the lita libraries not being maintained.

[JZebra]

@maalur that sounds annoying. I'm being negligent but I think we can use this for now. Try to tackle the upgrade during a gardening week or I can put it into a devops sprint.