: Turn off outdated SSL/TLS versions (like TLS 1.0 and 1.1).

: Require AES-256 and high-bit RSA keys for all transfers.