hg pull ssl check

[coderman]

when i pull from an https ssl repo it appears that hg is not
performing adequate ssl checks.
[that is, host a repo from ssl with self-signed / unknown ca cert and
verify that pull does not complain.]

is this an oversight or defaulted to permissive in some config?

i'd like hg to complain unless no verification is requested explicitly
(like --no-check-certificate for wget).

best regards,