Skip to content

Commit 1aceb72

Browse files
kylexqianclaude
andcommitted
Add security warning for verify_ssl=False in docs and docstring
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 5fcf233 commit 1aceb72

2 files changed

Lines changed: 12 additions & 1 deletion

File tree

docs/CLAUDE_SDK_USERS.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,10 @@ Each service has its own client class:
4141
llm = og.LLM(private_key="0x...")
4242

4343
# Connect directly to a known TEE IP instead of using the on-chain registry.
44-
# Set verify_ssl=False when the server uses a self-signed certificate.
44+
# WARNING: verify_ssl=False disables TLS certificate verification and exposes
45+
# the connection to man-in-the-middle attacks. Only use this when you trust
46+
# the network path to the server. Never use in production without understanding
47+
# the risks.
4548
llm = og.LLM(private_key="0x...", llm_server_url="https://1.2.3.4", verify_ssl=False)
4649

4750
# On-chain model inference (OpenGradient testnet gas tokens)

src/opengradient/client/llm.py

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,14 @@ class LLM:
8080
verify_ssl (bool): Whether to verify the server's TLS certificate.
8181
Defaults to ``True``. Set to ``False`` when connecting directly via
8282
``llm_server_url`` to a TEE with a self-signed certificate.
83+
84+
.. warning::
85+
Disabling SSL verification (``verify_ssl=False``) removes
86+
protection against man-in-the-middle attacks. Only use this
87+
when you trust the network path to the TEE and have verified
88+
the server identity through another means (e.g. the on-chain
89+
registry). Never use in production without understanding the
90+
risks.
8391
"""
8492

8593
def __init__(

0 commit comments

Comments
 (0)