I tell my developers to be compliant that they need to use TLS/SSL