All great points. The biggest issue I see with their apparent lack of consideration towards a passable SSL/TLS configuration is that it extends outside of thei

All great points. The biggest issue I see with their apparent lack of consideration towards a passable SSL/TLS configuration is that it extends outside of their own corporate web space to impact their customers. As just one example: https://www.ssllabs.com/ssltest/analyze.html?d=ozsale.com.au https://www.ssllabs.com/ssltest/analyze.html?d=ozsale.com.au You'll see in the Qualys report that the Akamai accelerated Ozsales gets an "F" & from the Qualys report you'll note that results in a PCI compliance failure (near the bottom of this report): https://www.ssllabs.com/ssltest/analyze.html?d=www.ozsale.com.au&s=23.204.176.90 https://www.ssllabs.com/ssltest/analyze.html?d=www.ozsale.co...