applied hellais suggestions on SSL TOFU