Default to TLSv1, not SSLv3