be more lenient on ssl