# Warning: Bypassing certificate validation

**URL:** <https://forum.inductiveautomation.com/t/warning-bypassing-certificate-validation/98567>\
**Category:** Ignition\
**Created:** [November 13, 2024, 3:27pm UTC](https://forum.inductiveautomation.com/t/warning-bypassing-certificate-validation/98567 "2024-11-13T15:27:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kenia\_Villegas](https://avatars.discourse-cdn.com/v4/letter/k/3ec8ea/32.png) [@Kenia\_Villegas](https://forum.inductiveautomation.com/u/Kenia_Villegas)\
**Post date:** [November 13, 2024, 3:27pm UTC](https://forum.inductiveautomation.com/t/warning-bypassing-certificate-validation/98567/1 "2024-11-13T15:27:57Z")

</div>

Hi everyone,

I recently found this warning in one of our gateways: "Bypassing certificate validation and hostname verification is highly insecure and should only be used for testing purposes" and haven't been able to figure out what is going on, hopefully someone here can give me a hand.  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/e/1e143c36e1b9ff308b963800abecbfb33e5ae26b.png)

Thank you in advance for any help!

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 13, 2024, 3:34pm UTC](https://forum.inductiveautomation.com/t/warning-bypassing-certificate-validation/98567/2 "2024-11-13T15:34:10Z")

</div>

It means you have one or more scripts using the `system.net.httpClient` or `system.net.http*` calls with the "bypass certificate validation" flag enabled.

It looks like these warnings are set up so they are only logged at WARN level at most once per minute, then on DEBUG for any intermediate instances.