[blueatlas]

I've run up against this multiple times for apps that were hosted on shared servers. In both instances we had to move the apps to dedicated virtual servers so that TLS v1.0/1.1 could be disabled.

None of the providers would disable TLS v1.0/1.1 and won't say when they will.

Also realize that some enterprise security products are also starting to block or throw warnings due to the host having old SSL/TLS protocols enabled.

[nvahalik]

If the headers being sent by the server are correct, then the software being used should actually support TLS 1.2. Why they continue to persist in not allowing it is beyond me.