docs: update api location
doc: clarify poodle mitigation
crypto: move disaling SSLv2/3 into JavaScript