update TLS doc to reflect absence of ECDHE