code: func SetDefaultTLSParams(config *Config) {
  	// If no ciphers provided, use default list
  	if len(config.Ciphers) == 0 {
  		config.Ciphers = defaultCiphers
  	}
  
  	// Not a cipher suite, but still important for mitigating protocol downgrade attacks
  	// (prepend since having it at end breaks http2 due to non-h2-approved suites before it)
  	config.Ciphers = append([]uint16{tls.TLS_FALLBACK_SCSV}, config.Ciphers...)
  
  	// Set default protocol min and max versions - must balance compatibility and security
  	if config.ProtocolMinVersion == 0 {
  		config.ProtocolMinVersion = tls.VersionTLS11
  	}
  	if config.ProtocolMaxVersion == 0 {
  		config.ProtocolMaxVersion = tls.VersionTLS12
  	}
  
  	// Prefer server cipher suites
  	config.PreferServerCipherSuites = true
  }
docs: // SetDefaultTLSParams sets the default TLS cipher suites, protocol versions,
  // and server preferences of a server.Config if they were not previously set
  // (it does not overwrite; only fills in missing values).