attack: make DefaultTLSConfig.InsecureSkipVerify false

No reason for it to be true, since the correspondent -insecure flag is
false by default.

Signed-off-by: Tomás Senart <tsenart@gmail.com>

lib/attack.go

@@ -60,7 +60,7 @@ var (
 	// DefaultLocalAddr is the default local IP address an Attacker uses.
 	DefaultLocalAddr = net.IPAddr{IP: net.IPv4zero}
 	// DefaultTLSConfig is the default tls.Config an Attacker uses.
-	DefaultTLSConfig = &tls.Config{InsecureSkipVerify: true}
+	DefaultTLSConfig = &tls.Config{InsecureSkipVerify: false}
 )
 
 // NewAttacker returns a new Attacker with default options which are overridden

lib/attack_test.go

@@ -65,7 +65,7 @@ func TestAttackDuration(t *testing.T) {
 func TestTLSConfig(t *testing.T) {
 	atk := NewAttacker()
 	got := atk.client.Transport.(*http.Transport).TLSClientConfig
-	if want := (&tls.Config{InsecureSkipVerify: true}); !reflect.DeepEqual(got, want) {
+	if want := (&tls.Config{InsecureSkipVerify: false}); !reflect.DeepEqual(got, want) {
 		t.Fatalf("got: %+v, want: %+v", got, want)
 	}
 }