Host name verification

For added security, host name verification enforces a match between the certificate common name and the host name in the URL.

For development purposes, you can keep the default value of com.ibm.rules.httpclient.verifyHostname to disable host name verification:
com.ibm.rules.httpclient.verifyHostname=false
In production, you must always enforce host name verification by changing the value to true:
com.ibm.rules.httpclient.verifyHostname=true
Note: When the value of allowSelfSigned is true, host name verification is disabled, regardless of whether you set verifyHostname to true or false.

For more information about the allowSelfSigned property, see Enabling communication with self-signed certificates.