RDS SSL/TLS certificates: how misconfigured client libraries leave you open to MITM
sslmode='require' encrypts the connection but does not verify the server certificate. Here's why that matters, and the exact configuration that actually closes the gap.