I agree that tls/ssl is really old complicated system with lots of cornercases in implementation. It's okay, but only if it's implemented in a proper way. I, as app developer, tend to skip to ‘what should I do’ section, and it’s good this time!