kwes00 - In my opinion, that is a big (very big) mistake. Do you understand what changing those settings does? Remember - you are sending customer credit card information. I would be very careful of making changes such as this without VERY clearly understanding what you've changed, and what exposure that might create for you.

This is open-source code, so of course you can change it as you like. So take the above advice... or not. But I can tell you I wouldn't make that code change (both you list) and take customer cc data.

My 2 cents...

PS - It might be alright to turn off "verifypeer" (if GoDaddy really does have broken libcurl). But turning both off... ??