This is heavily insecure because you for one enforce the use of a class which does no proper certificate validation and second additionally disable any remaining validation. This way you will not notice if some man in the middle will grab your login credentials.