Switch to TLS 1.2 by default