diff --git a/internal/stream/ssl.go b/internal/stream/ssl.go
index 9bb5810..5b621a5 100644
--- a/internal/stream/ssl.go
+++ b/internal/stream/ssl.go
@@ -16,6 +16,7 @@ import (
 	"sync"
 
 	"rua.plus/lolly/internal/config"
+	"rua.plus/lolly/internal/logging"
 	"rua.plus/lolly/internal/sslutil"
 )
 
@@ -190,6 +191,7 @@ func (m *ProxySSLManager) GetClientTLSConfig(serverName string) *tls.Config {
 		tlsConfig.RootCAs = m.rootCAPool
 	} else if !m.config.Verify {
 		// 跳过证书验证
+		logging.Warn().Msg("SSL证书验证已禁用，连接可能遭受中间人攻击")
 		tlsConfig.InsecureSkipVerify = true
 	}