> In particular, we answer the question "What would the user like to do?" and not "What does the TLS protocol allow the user to do?" This makes me think of the

> In particular, we answer the question "What would the user like to do?" and not "What does the TLS protocol allow the user to do?" This makes me think of the laudable approach taken by the developers for the Cryptography library for python. Expose functions to users with sane and safe settings to users, and provide the abilities to override the defaults if you really must (but in such a manner that it's extremely clear that you're stepping into dangerous territory)