Some libraries use callbacks for e.g. host certificate verification so the consuming application can manage its own whitelists.