default to TLS when not being able to determine version