APICenterV2

en/APICenterV2.md

@@ -1960,7 +1960,7 @@ The authorization happens when connection is established. There are two types of
 
 When establishing a wss connection, the client will verify whether the accessed domain name is consistent with the domain name of the certificate. Therefore, by default, if you use IP to establish a connection, an error will be returned, causing the connection to fail.
 
-Hence, it is recommended that the client skip the domain name verification for the certificate (both android and java can do that). If you cannot skip the certificate verification, you can try to establish a wss connection via IP.
+Skipping certificate verification can lead to Man-in-the-Middle (MITM) attacks unless the root certificate is verified by the App. If you cannot skip the certificate verification, you can try to establish a wss connection via IP.
 
 Obtain the persistent connection address to be connected from [HTTP: Dispatchservice], and concatenate it into: "wss://IP:port/api/ws", so as to establish a persistent connection. After the handshake is successful, you need to send the string "ping" to the server periodically (see the hbInterval field for the interval) to keep the heartbeat, otherwise the device will be forced to go offline by the server.