They were going to be required by 2016, but then PCI-DSS decided to give companies an extra 2 years to implement the changes. https://cdn2.hubspot.net/hubfs/28

They were going to be required by 2016, but then PCI-DSS decided to give companies an extra 2 years to implement the changes. https://cdn2.hubspot.net/hubfs/281302/Resources/Migrating_from_SSL_and_Early_TLS_-v12.pdf https://cdn2.hubspot.net/hubfs/281302/Resources/Migrating_fr...