inets: Make https requests verify host by default

[dgud]

Make ssl connections more secure by default.

[github-actions[bot]]

CT Test Results

    2 files    21 suites   12m 58s :stopwatch: 333 tests 310 :heavy_check_mark: 22 :zzz: 1 :x: 556 runs  518 :heavy_check_mark: 38 :zzz: 0 :x:

For more details on these failures, see this check.

Results for commit 20a73780.

:recycle: This comment has been updated with latest results.

To speed up review, make sure that you have read Contributing to Erlang/OTP and that all checks pass.

See the TESTING and DEVELOPMENT HowTo guides for details about how to run test locally.

Artifacts

• Complete CT logs (Download Logs)
• HTML Documentation (Download HTML Docs)
• Windows Installer

// Erlang/OTP Github Action Bot

[max-au]

@voltone - it's finally happening, one of the first items we had under "what EEF Security WG should attempt". Thanks @dgud !

[dgud]

Any opinions of we should use wildcard matching on the hostnames or not? Currently it used, so slightly more insecure but used almost on all hosts.