http://samkass.com/theories/RPSSL.html