diff --git a/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/client/api/v1/impl/DssComponent.java b/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/client/api/v1/impl/DssComponent.java
index cd2d40922146e78a500c1f4bdd98f807a7ebdcf0..b570166d8893074d8383d3f5dec51c0bf19c3c14 100644
--- a/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/client/api/v1/impl/DssComponent.java
+++ b/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/client/api/v1/impl/DssComponent.java
@@ -466,6 +466,7 @@ class AuthenticatedState extends AbstractDssComponentState
         {
             if (url.toLowerCase().startsWith("https"))
             {
+                // TODO: find a way to accept invalid certificates on request
                 return new URL(null, url, new sun.net.www.protocol.https.Handler())
                         .openConnection().getInputStream();
             } else