you can do whatever you want, this is about what browsers and SSL cert issuers will agree is reasonable and will indicate to users is "secure". other decisions

you can do whatever you want, this is about what browsers and SSL cert issuers will agree is reasonable and will indicate to users is "secure". other decisions they've made on this topic that you can disagree with if you care: - ciphers - hashes - CAs - revocation systems etc