I once by chance caught a guy disabling root certificate validation
old.reddit.com