diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,3 +1,7 @@
+## 1.4.0
+
+* Migrate to crypton
+
 ## 1.3.2
 
 * Use the recommended SSL versions from TLS
diff --git a/Data/Conduit/Network/TLS.hs b/Data/Conduit/Network/TLS.hs
--- a/Data/Conduit/Network/TLS.hs
+++ b/Data/Conduit/Network/TLS.hs
@@ -176,13 +176,12 @@
 -- | run a server un-crypted but also pass a call-back to trigger a StartTLS handshake
 -- on the underlying connection
 --
--- example usage :
---  @
---  runTCPServerStartTLS serverConfig $ (appData,startTLS) -> do
---    abortTLS <- doSomethingInClear appData
---    unless (abortTLS) $ startTls $ appDataTls -> do
---      doSomethingSSL appDataTls
---  @
+-- Sample usage:
+-- 
+-- > runTCPServerStartTLS serverConfig $ \(appData,startTLS) -> do
+-- >   abortTLS <- doSomethingInClear appData
+-- >   unless abortTLS $ startTls $ \appDataTls -> do
+-- >     doSomethingSSL appDataTls
 runTCPServerStartTLS :: MonadUnliftIO m => TLSConfig -> GeneralApplicationStartTLS m () -> m ()
 runTCPServerStartTLS TLSConfig{..} app = withRunInIO $ \run -> do
     creds <- readCreds tlsCertData
diff --git a/network-conduit-tls.cabal b/network-conduit-tls.cabal
--- a/network-conduit-tls.cabal
+++ b/network-conduit-tls.cabal
@@ -1,5 +1,5 @@
 name:                network-conduit-tls
-version:             1.3.2
+version:             1.4.0
 synopsis:            Create TLS-aware network code with conduits
 description:         Uses the tls package for a pure-Haskell implementation.
 homepage:            https://github.com/snoyberg/conduit
@@ -9,32 +9,34 @@
 maintainer:          michael@snoyman.com
 category:            Network
 build-type:          Simple
-cabal-version:       >=1.8
+cabal-version:       >=1.10
 extra-source-files:  README.md ChangeLog.md
 
 library
+  default-language:   Haskell2010
   exposed-modules:    Data.Conduit.Network.TLS
                       Data.Conduit.Network.TLS.Internal
-  build-depends:      base            >= 4.9      && < 5
+  build-depends:      base            >= 4.12     && < 5
                     , bytestring      >= 0.9
                     , tls             >= 1.3
                     , conduit-extra   >= 1.3
                     , conduit         >= 1.3
                     , network
                     , transformers
-                    , connection
+                    , crypton-connection
                     , streaming-commons >= 0.1.12
                     , unliftio-core
                     , data-default-class
 
 test-suite test
+    default-language:   Haskell2010
     hs-source-dirs: test
     main-is: main.hs
     type: exitcode-stdio-1.0
     cpp-options:   -DTEST
     build-depends:   conduit
                    , conduit-extra
-                   , connection
+                   , crypton-connection
                    , base
                    , mtl
                    , network-conduit-tls