read from the tlsconn not the conn