tls: level 1 after all