tls can be nonexistent