---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Verify certificate chain and hostname

# Verify certificate chain and hostname {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure the com.glide.communications.httpclient.verify_hostname property to prevent man-in-the-middle-attacks by ensuring that the certification verification process is executed.
When the com.glide.communications.httpclient.verify_hostname system property is not set to the secure value of true, the hostname and certificate chain presented by remote hosts during a
TLS connection initiated from the ServiceNow instance are not validated.

Ensure that the com.glide.communications.httpclient.verify_hostname system property is set to the secure value of true.

## More information {#sc-verify-certificate-chain-and-hostname__section_qhx_1b1_xwb}

{#sc-verify-certificate-chain-and-hostname__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.communications.httpclient.verify_hostname |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | \<none\> |
| Fallback value | false |
| Category | [Communications](https://www.servicenow.com/docs/ul5KpPGZs1A3ijpW_v_lwg "This control ensures proper encryption using strong algorithms and ciphers. This includes ensuring the recommended version of TLS is used for client connectivity, use of strong cipher suites, use of trusted and signed certificates, ensuring connections are encrypted between components and logging of connection failures.") |
| Security risk | * Severity score: High * CVSS score: 7.4 * Security risk details: This could compromise the security of the TLS connection and allow person-in-the-middle attacks, where communications between two parties are intercepted. This may lead to sensitive data disclosure. {#sc-verify-certificate-chain-and-hostname__ul_ihv_dvg_1xb} |
| Dependencies and prerequisites | None |
| Functional impact | Verifies hostname and certificate chain presented by remote secure socket layer (SSL) hosts. Set this property to true to secure against Man-in-the-middle (MITM) attacks. Note: This property overrides the com.glide.communications.trustmanager_trust_all, property. |
[ ]

{#sc-verify-certificate-chain-and-hostname__table_ajc_b43_3kb}