We currently use only 1 acceptor process for TLS connections by default. This is due to a bug in the ssl app discovered by @essen around the time we migrated to Ranch (during the 3.6.0 development cycle) that resulted in a lot of extra log noise (think every error message replicated as many times as there are acceptors). The bug has long been fixed but the number of TLS acceptors has never been equalised with that of TCP ones.