mod_firewall: Add checkcerts option for HTTP lists, cert verification disabled when SNI unsupported This provides a balance between security and usability. SNI is supported in Prosody trunk and in Prosody 0.11 from commit 30d3f6f85eb8 (scheduled for 0.11.7).

This module lets you block connections to any remote servers not on a
whitelist.

``` {.lua}
s2s_whitelist = {
    "example.org",
}
```