[bdeol22]

2029 is plausible at Cloudflare's edge; the long tail is boring enterprise TLS configs someone last touched in 2017.

[bwesterb]

Yeah, it's rough. Important to understand now for each product / system what the business impact is if it's not upgraded in time.

[bdeol22]

Agreed. The migrations that stall are usually missing an explicit owner for each TLS surface, not missing algorithms. Business impact is the forcing function once you know who gets paged.