doc: tls: rejectUnauthorized defaults to true after 35607f3a

lib/tls.js

@@ -1043,13 +1043,13 @@ SecurePair.prototype.error = function() {
 //   If true clients whose certificates are invalid for any reason will not
 //   be allowed to make connections. If false, they will simply be marked as
 //   unauthorized but secure communication will continue. By default this is
-//   false.
+//   true.
 //
 //
 //
 // Options:
 // - requestCert. Send verify request. Default to false.
-// - rejectUnauthorized. Boolean, default to false.
+// - rejectUnauthorized. Boolean, default to true.
 // - key. string.
 // - cert: string.
 // - ca: string or array of strings.