HTTPS/SSL/TLS are not correctly configured on many web servers, the slides here presented the best practices for administrators.tls.odp