Description
The web server supports encryption through TLS 1.0, which was formally deprecated in March 2021 as a result of inherent security issues. In addition, TLS 1.0 is not considered to be "strong cryptography" as defined and required by the PCI Data Security Standard 3.2(.1) when used to protect sensitive information transferred to or from web sites. According to PCI, "30 June 2018 is the deadline for disabling SSL/early TLS and implementing a more secure encryption protocol – TLS 1.1 or higher (TLS v1.2 is strongly encouraged) in order to meet the PCI Data Security Standard (PCI DSS) for safeguarding payment data.
Remediation
It is recommended to disable TLS 1.0 and replace it with TLS 1.2 or higher.
References
RFC 8996: Deprecating TLS 1.0 and TLS 1.1
Are You Ready for 30 June 2018? Saying Goodbye to SSL/early TLS