diff --git a/emacs/.emacs.d/init.org b/emacs/.emacs.d/init.org
index 398551c..cd9e358 100644
--- a/emacs/.emacs.d/init.org
+++ b/emacs/.emacs.d/init.org
@@ -1020,6 +1020,17 @@
     (setq electric-pair-skip-whitespace 'chomp)
   #+END_SRC
 
+* Reject SSL/TLS certificates that don't check out
+
+  You just can't trust the internet. And I'd prefer to know if
+  something goes wrong.
+
+  #+BEGIN_SRC emacs-lisp
+    (defvar gnutls-verify-error)
+
+    (setq gnutls-verify-error t)
+  #+END_SRC
+
 * Programming
 
   Emacs is a real programmer's editor, especially so because it's so