Support TLSv1.1 and TLSv1.2
Default to TLSv1.2

It's 2014, no idea how this made it as a default for the past 16 years...