Comment 13 for bug 1469221

FWIW:

        # enable certificates validation in webkit views unless specified otherwise
        if "SOFTWARE_CENTER_FORCE_DISABLE_CERTS_CHECK" in os.environ:
            context.set_tls_errors_policy(webkit.TLSErrorsPolicy.IGNORE)
            # WARN the user!! Do not remove this
            LOG.warning("SOFTWARE_CENTER_FORCE_DISABLE_CERTS_CHECK " +
                        "has been specified, all purchase transactions " +
                        "are now INSECURE and UNENCRYPTED!!")

Is not accurate, you are still going to have encryption. It just might be an encrypted connection to some attacker. :)