no TLS for legacy :-(