Speaking of, disabling TLS 1.0 is a great way to reduce traffic from unwanted bots. (although I still run TLS 1.1) If necessary, someone will create a dotdeb-e

Speaking of, disabling TLS 1.0 is a great way to reduce traffic from unwanted bots. (although I still run TLS 1.1) If necessary, someone will create a dotdeb-equivalent for an openssl version with TLS 1.0. This is a "dammed if you do, dammed if you don't" type of thing. If they don't disable it, at the next big security issue, everyone will blame openssl/distributions for being negligent.