post ssl tweaks