Use PFS-safe SSL parameters, mitigate BEAST by avoiding RC4