I've not tested with code, but it looks like TLS hostname verification is a mess for the C++ client (and python by extension).
For binary connections, no hostname verification takes place as far as I can see. For http connections (for lookups) it takes place every time.
I suspect this made it through testing since the tls certs used to test C++ use localhost as the common name. We should expose the ability to add the host verification in the configuration.
I've not tested with code, but it looks like TLS hostname verification is a mess for the C++ client (and python by extension).
For binary connections, no hostname verification takes place as far as I can see. For http connections (for lookups) it takes place every time.
I suspect this made it through testing since the tls certs used to test C++ use localhost as the common name. We should expose the ability to add the host verification in the configuration.