3 ms·

I assume old versions can still connect, and therefore there are legacy unencrypted modes. Is there any protection against downgrade attacks?