Hi all, Last week I opened an issue to report what I believe is a regression in the HTTPClient when using TLS:
https://github.com/apache/iceberg/issues/15598 I also opened a PR to fix it: https://github.com/apache/iceberg/pull/15500 The fix is basically to expose the HostnameVerificationPolicy in the TLSConfigurer, and I think there is consensus on that. However I would like to have the community's opinion about the default value we should use for the HostnameVerificationPolicy. We can either go with: - CLIENT, which reproduces the current behavior in 1.10 but is less safe; or - BOTH, which introduces a behavioral change, but is the safest option. What do you think? Thanks, Alex
