Badness in MD5.as, plus TLS update