"insecure" by default in the CLI client?
Currently, the command-line client, by default, rejects capsule with a certificate not signed by a known CA. They are the majority of all capsules. You can change this behaviour with --insecure
but it could be better to change the default?
Warning: this would break compatibility (for instance in scripts) so the --insecure
option must stay.