implement server downgrades from TLS 1.1 to TLS 1.0