Assessing SSL implementation security