We also considered disabling tls <1.2 but after some analysis there is still too much clients and even servers that aren't tls 1.2 enabled... It's a bit too early to disable the support for it.
Sébastien Riccio
System & Network Admin
https://swisscenter.com