Purpose of allowing SSL bypass

hi @aakriti.kamboj !
In vDesigner 2.0, allowing SSL bypass while creating the build serves a specific purpose, primarily related to the development and testing process. Here’s a breakdown of its purpose:

  1. Development and Testing Convenience: When developing or testing applications locally or in environments without a valid SSL certificate (e.g., development, staging, or non-production environments), SSL verification may cause issues. Disabling or bypassing SSL checks helps developers and testers continue their work without being hindered by certificate validation problems, which might not be critical in these early stages.
  2. Avoiding SSL Errors: During the build process, some external services or APIs might not have proper SSL certificates or may use self-signed certificates. SSL bypass prevents errors related to untrusted or invalid certificates, making it easier to build and test applications in such scenarios.
  3. Security Risks: In production environments, SSL bypass should never be used because it exposes the application to security vulnerabilities, such as man-in-the-middle attacks. SSL encryption is critical for protecting data integrity and privacy, so SSL verification should be re-enabled before deploying the application to production.
4 Likes