that is about hostnameverification. By specifying "true" we are telling we don't want hostnameverifcation and trust all hostnames. As discussed already I'll change that "true" to "!http.sslVerify".

Problem: this causes one problem when writing tests. We want tests with sslVerify set to true. Up to know we used in our unit tests a static server certificate for a not existing hostname which lead to failing unit tests if hostnameverification is on. I'll change the tests to use a server certificate for "localhost" and make sure the tests try to reach "localhost".