diff --git a/topics/threat/ssl.adoc b/topics/threat/ssl.adoc index 76c32c8909..5d309d023c 100644 --- a/topics/threat/ssl.adoc +++ b/topics/threat/ssl.adoc @@ -8,7 +8,7 @@ Once they have an access token they can do any operation that the token has been {{book.project.name}} has <>. SSL can be hard to set up, so out of the box, {{book.project.name}} allows non-HTTPS communication over private IP addresses like -localhost, 192.168.x.x, and other private IP addresses. +localhost and 192.168.x.x. In production, you should make sure SSL is enabled and required across the board. On the adapter/client side, {{book.project.name}} allows you to turn off the SSL trust manager.