We recommend that TLS clients support TLS 1.2 or higher, Server Name
Indication (SNI), and modern AEAD cipher suites.