POODLE-proofing

http://nginx.com/blog/nginx-poodle-ssl/