Until the last few years, anything newer than TLS1.0+SHA1 was considered crypto-wonk neckbeard territory. Sure, it was standardized, but asking a vendor to implement it would get you an eyeroll and a &quot;sure, we&#x27;ll get <i>right on that</i>, uh huh&quot;.