better solution to prevent the SSLv3 downgrade attack

This solution is borrowed from https://chromabits.com/post/poodle-and-nodejs. Thanks @MarcelGerber for bringing this up.