Sync up nginx details

Moving stuff from tls-standards into here.