Kroxylicious fails to validate the server's hostname during TLS connections, resulting in a non-secure connection.