[johnp_]

Still possible:

security.tls.version.min security.tls.version.max

security.ssl3.<cipher_suite>

[cm3]

Thanks, you're right, found and disabled all but two specs and tuned minimum to 3 which is TLS1.2. Will put those in the locked config file, so that they're read-only at runtime.