Out of curiosity, I ran an SSL tester on opam.ocaml.org to make sure we're ok: https://www.ssllabs.com/ssltest/analyze.html?d=opam.ocaml.org Generally fine, except we may want to investigate why session resumption isn't working. It may be that we need to configure stud with persistence support. -anil