diff --git a/handlers/backend_handler.go b/handlers/backend_handler.go
index 7df7663b..0d4bb184 100644
--- a/handlers/backend_handler.go
+++ b/handlers/backend_handler.go
@@ -116,8 +116,8 @@ func newBackendTransport(
 	transport.TLSHandshakeTimeout = 10 * time.Second
 	transport.ExpectContinueTimeout = 1 * time.Second
 
-	// #nosec G402 -- TODO: fix tests to use TLS properly.
 	if TLSSkipVerify {
+		// #nosec G402 -- TODO: fix tests to use TLS properly.
 		transport.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
 	}