note for game developers: I know security is not particularly your strong suit, but HTTPS for online services serves little purpose if you just stub certificate validation! Hope this helps :)
of course if you are developing a live service game and know the writing is on the wall for the live service, it serves a lot of purpose and you should convince everyone on the team that it's a good idea to skip certificate validation :3