change plan to use sslsocket (and not to permit "raw" transfer)