{"action":"created","issue":{"url":"https://api.github.com/repos/golang/go/issues/11076","labels_url":"https://api.github.com/repos/golang/go/issues/11076/labels{/name}","comments_url":"https://api.github.com/repos/golang/go/issues/11076/comments","events_url":"https://api.github.com/repos/golang/go/issues/11076/events","html_url":"https://github.com/golang/go/issues/11076","id":85317938,"number":11076,"title":"net/http: Transport VerifyHostname should be optional when using TLS","user":{"login":"agj32mrgibbits","id":1747634,"avatar_url":"https://avatars.githubusercontent.com/u/1747634?v=3","gravatar_id":"","url":"https://api.github.com/users/agj32mrgibbits","html_url":"https://github.com/agj32mrgibbits","followers_url":"https://api.github.com/users/agj32mrgibbits/followers","following_url":"https://api.github.com/users/agj32mrgibbits/following{/other_user}","gists_url":"https://api.github.com/users/agj32mrgibbits/gists{/gist_id}","starred_url":"https://api.github.com/users/agj32mrgibbits/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agj32mrgibbits/subscriptions","organizations_url":"https://api.github.com/users/agj32mrgibbits/orgs","repos_url":"https://api.github.com/users/agj32mrgibbits/repos","events_url":"https://api.github.com/users/agj32mrgibbits/events{/privacy}","received_events_url":"https://api.github.com/users/agj32mrgibbits/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-06-04T23:03:16Z","updated_at":"2015-06-05T00:27:26Z","closed_at":null,"body":"There should be an option to verify the certificate chain without verifying the hostname. Currently you can only disable both certificate and hostname verification using InsecureSkipVerify.\r\n\r\n`https://tools.ietf.org/html/rfc6125#appendix-B.2` \r\n```\r\n...\r\nIf the client has external information as to the expected identity of\r\nthe server, the hostname check MAY be omitted.  (For instance, a\r\nclient may be connecting to a machine whose address and hostname are\r\ndynamic but the client knows the certificate that the server will\r\npresent.)\r\n...\r\n```\r\nA new boolean should be added to tls.Config named `InsecureHostnameSkipVerify`."},"comment":{"url":"https://api.github.com/repos/golang/go/issues/comments/109102428","html_url":"https://github.com/golang/go/issues/11076#issuecomment-109102428","issue_url":"https://api.github.com/repos/golang/go/issues/11076","id":109102428,"user":{"login":"bradfitz","id":2621,"avatar_url":"https://avatars.githubusercontent.com/u/2621?v=3","gravatar_id":"","url":"https://api.github.com/users/bradfitz","html_url":"https://github.com/bradfitz","followers_url":"https://api.github.com/users/bradfitz/followers","following_url":"https://api.github.com/users/bradfitz/following{/other_user}","gists_url":"https://api.github.com/users/bradfitz/gists{/gist_id}","starred_url":"https://api.github.com/users/bradfitz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bradfitz/subscriptions","organizations_url":"https://api.github.com/users/bradfitz/orgs","repos_url":"https://api.github.com/users/bradfitz/repos","events_url":"https://api.github.com/users/bradfitz/events{/privacy}","received_events_url":"https://api.github.com/users/bradfitz/received_events","type":"User","site_admin":false},"created_at":"2015-06-05T00:27:26Z","updated_at":"2015-06-05T00:27:26Z","body":"Why can't you just use Transport.DialTLS?\r\n"}}