• Many users expected that Mojo::UserAgent would verify all TLS certificates by default. Unfortunately that has not
  been the case so far, but will change with this release in an effort to strengthen security. By default
  Mojo::UserAgent will now reject all invalid TLS certificates. To return to the previous behavior you can use the new
  insecure attribute.
  $ua->insecure(1);
  To make testing easier, Test::Mojo will default to having the insecure attribute activated. And with the get command
  you can use the new -k option.
  mojo get -k https://127.0.0.1:3000
  That also means that Mojo::IOLoop::TLS will no longer have a default tls_verify value. To disable TLS certificate
  verification there you can use the value 0x00.
  $tls->negotiate(tls_verify => 0x00);
  
• Added insecure attribute to Mojo::UserAgent.
  
• Added EXPERIMENTAL server method to Mojolicious.
  
• Added EXPERIMENTAL before_server_start hook.
  
• Added -k option to get command.
  
• Fixed a bug where Mojo::DOM could only reuse Mojo::DOM objects containing
  root nodes.