When using the mongo shell to connect to a mongod/mongos running with ssl, there would be less confusion over the shell's behavior if the user had to explicitly say whether they wanted certificate verification or don't.

i.e. you must specific either --sslCAFile or --skipCertificateCheck