I wrote: Grigg's Law, "There is only one mode of operation and that is secure" A good overview of this, from someone who understands the issues with TLS very well, is Adam Langley's essay on cryptographic agility: https://www.imperialviolet.org/2016/05/16/agility.html Peter.