TLS improvements on server side