I try to access a file with open-uri over an https connection. Unfortunately somethings wrong with the certificate, I get a certificate verify failed error. I can\'
It's your call, but setting VERIFY_PEER to NONE is basically equivalent
to disabling TLS altogether and connecting over plaintext HTTP. It makes
man in the middle attacks trivial, and will not pass a PCI audit.