TLS hardening(arxiv.org)

http://arxiv.org/abs/1407.2168