3 files changed, 27 insertions, 1 deletions

diff --git a/doc/source/config.rst b/doc/source/config.rst
index e209ecb..d89d7f5 100644
--- a/doc/source/config.rst
+++ b/doc/source/config.rst
@@ -202,6 +202,17 @@ to explicitly whitelist some `stream wrappers <https://secure.php.net/manual/en/
   sp.wrappers_whitelist.list("file,php,phar");
 
 
+Mandatory certificates validation
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+:ref:`Mandatory certificate validation <mandatory-cert-validation>` ensures
+that it's not possible to turn off certificate validation for `cURL usage <https://secure.php.net/manual/en/book.curl.php>`__.
+
+::
+
+  sp.curl_verify_certificates.enable();
+
+
 Eval white and blacklist
 ^^^^^^^^^^^^^^^^^^^^^^^^
 
diff --git a/doc/source/encryption.rst b/doc/source/encryption.rst
index dc5dadf..23f36b4 100644
--- a/doc/source/encryption.rst
+++ b/doc/source/encryption.rst
@@ -4,7 +4,7 @@ Cookies
 =======
 
 Some cookies-related features might prevent other extensions from hooking
-the `setcookie<https://secure.php.net/manual/en/function.setcookie.php>`__
+the `setcookie <https://secure.php.net/manual/en/function.setcookie.php>`__
 function. Pay attention to the loading order of your extensions in this case.
 
 auto_cookie_secure
diff --git a/doc/source/features.rst b/doc/source/features.rst
index 540e982..f676468 100644
--- a/doc/source/features.rst
+++ b/doc/source/features.rst
@@ -344,6 +344,21 @@ Snuffleupagus can prevent the execution of this kind of file. A good practice
 would be to use a different user to run PHP than for administrating the website,
 and using this feature to lock this up.
 
+
+.. _mandatory-cert-validation:
+
+Mandatory certificates validation
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+It's a common practise to disable `certificate validation <https://en.wikipedia.org/wiki/Transport_Layer_Security>`__
+during development for convenience's sake. Unfortunately, it's equally common
+to forget to turn it back on.
+
+Snuffleupagus can prevent php code from turning off certificate validation
+for anything `cURL <https://secure.php.net/manual/en/book.curl.php>`__-based.
+
+
+
 .. _stream-wrapper-whitelist-feature:
 
 Whitelist of stream-wrappers