less aggressive SSL