Strict SSL is set to false by default, but can be customized