diff --git a/opendrop/config.py b/opendrop/config.py
index 544a249..b000925 100644
--- a/opendrop/config.py
+++ b/opendrop/config.py
@@ -121,7 +121,7 @@ class AirDropConfig:
                        stderr=subprocess.PIPE)
 
     def get_ssl_context(self):
-        ctx = ssl.SSLContext(ssl.PROTOCOL_TLS)
+        ctx = ssl.SSLContext(ssl.PROTOCOL_TLS)  # lgtm[py/insecure-protocol], TODO see https://github.com/Semmle/ql/issues/2554
         ctx.options |= ssl.OP_NO_TLSv1  # TLSv1.0 is insecure
         ctx.load_cert_chain(self.cert_file, keyfile=self.key_file)
         ctx.load_verify_locations(cafile=self.root_ca_file)