Use 3.4's ssl.create_default_context when available

Related #472 
I expanded this comment a tad bit to make it clear that SSLv2 is easily broken as the reasoning for it being considered harmful.