Create document about deprecating older TLS versions for hosted servers

[danyork]

Per #10, goal is to create:

ose-web-tls-versions-hosted.md

with:

• info about why we want to disable TLS 1.0 and 1.1
• info to send to a web hosting provider requesting they disable TLS 1.0 and 1.1
• a list of web hosting providers known to no longer support TLS 1.0 and 1.1

We can use the -apache.md version as the template to start.

[danyork]

If anyone reading this knows of web hosting providers who that have ALREADY stopped supporting TLS 1.0 and 1.1 (or an existing list of such hosting providers), please feel free to add that information as a comment here on this issue.

[eduardodiazrivera]

Godaddy stopped supporting TSL 1.0 and 1.1 after March 2020.

…

-ed

On Fri, May 22, 2020 at 1:59 PM Dan York ***@***.***> wrote: If anyone reading this knows of web hosting providers who that have ALREADY stopped supporting TLS 1.0 and 1.1 (or an existing list of such hosting providers), please feel free to add that information as a comment here on this issue. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#18 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAOCH5POJZX77J74X6IJIDTRS24RDANCNFSM4NH6I45A> .

-- *NOTICE:* This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately.

[JohnS347]

https://tools.ietf.org/html/bcp195#section-3.1.1

https://www.pcisecuritystandards.org/documents/Migrating-from-SSL-Early-TLS-Info-Supp-v1_1.pdf
https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices#22-use-secure-protocols

https://developer.mozilla.org/en-US/docs/Web/Security/Transport_Layer_Security#Retiring_old_TLS_versions
https://blog.mozilla.org/security/2018/10/15/removing-old-versions-of-tls/
https://blogs.windows.com/msedgedev/2020/03/31/tls-1-0-tls-1-1-schedule-update-edge-ie11/
https://security.googleblog.com/2018/10/modernizing-transport-security.html
https://webkit.org/blog/8462/deprecation-of-legacy-tls-1-0-and-1-1-versions/