BC-2531 TLSv1 TLSv1.1 TLSv1.2;  # don’t use SSLv3 ref: POODLE