Don't use the default Android SSL cypher list, see http://op-co.de/blog/posts/android_ssl_downgrade/