Allow self-signed certificates, and disallow SSL 3