MUST use >= TLS 1.2