fixed tls lower bound