Thanks for the cloudflare link, that explains it pretty well. IIRC there was another middlebox kerfuffle related to some vendor complaining that removing non-P

Thanks for the cloudflare link, that explains it pretty well. IIRC there was another middlebox kerfuffle related to some vendor complaining that removing non-PFS ciphers(?) would destroy their business. IIRC the initial response was to shove it, and for legitimate purposes like employee monitoring in enterprises there are ways around it (installing middlebox certs on managed clients?). Whatever happened to this (or was this even what the argument was about?)? Did the IETF bow to these demands or not?