diff --git a/commons/http-framework/client-apache-async/src/main/java/org/forgerock/http/apache/async/AsyncHttpClientProvider.java b/commons/http-framework/client-apache-async/src/main/java/org/forgerock/http/apache/async/AsyncHttpClientProvider.java
index cd0425a45c..dc31a7b4b0 100644
--- a/commons/http-framework/client-apache-async/src/main/java/org/forgerock/http/apache/async/AsyncHttpClientProvider.java
+++ b/commons/http-framework/client-apache-async/src/main/java/org/forgerock/http/apache/async/AsyncHttpClientProvider.java
@@ -12,6 +12,7 @@
  * information: "Portions Copyright [year] [name of copyright owner]".
  *
  * Copyright 2015 ForgeRock AS.
+ * Portions Copyrighted 2026 3A Systems, LLC
  */
 
 package org.forgerock.http.apache.async;
@@ -128,11 +129,15 @@ public HttpClient newHttpClient(final Options options) throws HttpApplicationExc
             throw new HttpApplicationException("Can't create SSL Context", e);
         }
 
-        HostnameVerifier verifier = new DefaultHostnameVerifier();
+        final HostnameVerifier verifier;
         switch (options.get(OPTION_HOSTNAME_VERIFIER)) {
         case ALLOW_ALL:
             verifier = NoopHostnameVerifier.INSTANCE;
             break;
+        default:
+            // STRICT (and any future policy) uses strict host name verification.
+            verifier = new DefaultHostnameVerifier();
+            break;
         }
 
         List<String> protocols = options.get(OPTION_SSL_ENABLED_PROTOCOLS);