improved ssl settings