# Applies to every router: TLS 1.2 or newer (Exhibit B), and no certificate for
# requests that do not name one of our hosts.
tls:
  options:
    default:
      minVersion: VersionTLS12
      sniStrict: true