[toast0]

> There's no reason to remove TLS 1.1 from your server.

I posit there's no reason to support TLS 1.1 on your server. There are very few clients that support TLS 1.1, but not TLS 1.2. So, either you are willing to support clients on TLS 1.0 (or SSLv3), or you aren't.

[1over137]

Apple only added TLS 1.2 to their SecureTransport lib in OS X 10.9, which was released in late 2013. Not so old!

[toast0]

Did they actually support tls 1.1 though?