diff --git a/pkg/image/containerdregistry/resolver.go b/pkg/image/containerdregistry/resolver.go
index 9ac771dde..f7520b5cb 100644
--- a/pkg/image/containerdregistry/resolver.go
+++ b/pkg/image/containerdregistry/resolver.go
@@ -27,16 +27,11 @@ func NewResolver(configDir string, insecure bool, roots *x509.CertPool) (remotes
 		TLSHandshakeTimeout:   10 * time.Second,
 		ExpectContinueTimeout: 5 * time.Second,
 		TLSClientConfig: &tls.Config{
-			InsecureSkipVerify: false,
+			InsecureSkipVerify: insecure,
 			RootCAs:            roots,
 		},
 	}
 
-	if insecure {
-		transport.TLSClientConfig = &tls.Config{
-			InsecureSkipVerify: insecure,
-		}
-	}
 	headers := http.Header{}
 	headers.Set("User-Agent", "opm/alpha")
 
@@ -55,9 +50,6 @@ func NewResolver(configDir string, insecure bool, roots *x509.CertPool) (remotes
 		)),
 		docker.WithClient(client),
 	}
-	if insecure {
-		regopts = append(regopts, docker.WithPlainHTTP(docker.MatchAllHosts))
-	}
 
 	opts := docker.ResolverOptions{
 		Hosts:   docker.ConfigureDefaultRegistries(regopts...),