no need for ssl flag