fix vulnerability to POODLE