GitLab

TLSv1 and TLSv1.1 are deprecated and we should remove support for it, not now, as discussed in #5770 (closed), but it has to happen sometime.

I have run some tests on the biggest webmail providers, dutch mail providers, dutch ISPs, and french ISPs, and I only found 2 providers (out of 64) who don't support TLSv1.2: Orange (french ISP) and Excite.com. Orange only supports SSLv3 and TLSv1, Excite only supports TLSv1 and TLSv1.1. None of the tested mailservers have TLSv1 and TLSv1.1 disabled yet.

Question is mostly when - are we waiting for a big provider to start the movement? Do we just wait a little more and do it at the end of 2021?