A wastewater plant’s Python requests scripts call controller HTTPS APIs and must trust only the civic PKI. Which TLS practice is correct?
Select an answer to reveal the explanation.
Short Explanation
TLS verify is the plant’s lock checking the controller’s badge against the city badge printer. Point requests at the civic CA trust store and keep verification on. verify=False or cleartext HTTP is leaving the gate open because the lock beeped.
Full Explanation
Automation clients should verify HTTPS server certificates against the organization’s trusted CA material—here the civic PKI—so controller endpoints cannot be trivially spoofed. Disabling verification (verify=False) or using an unrelated trust bundle weakens or breaks that guarantee. Cleartext HTTP removes confidentiality and authenticity for credentials and payloads.