RFC 8996, published in March 2021, formally deprecated TLS 1.0 and TLS 1.1. This September briefing revisits an established requirement, not a new ban announced today. The document says neither version must be used or negotiated; an encrypted connection is not automatically a suitably modern connection.

For an older appliance, business application or hosted service, ask the supplier which TLS versions its current supported release negotiates. Request information for the actual model and firmware, including management interfaces and outbound connections. A general claim that a product supports HTTPS does not answer those questions.

If an integration depends on an obsolete version, plan a supported update or replacement with the system owner. Inventory dependent clients and test the change before production rollout. Do not restore old protocol support merely to hide a compatibility error; document the dependency that needs fixing.

The purchasing decision is about maintainability as well as protocol names: check update availability, the support window and migration work. RFC 8996 is not a product certification, and YNIX has not scanned individual devices. A claim of TLS 1.2 or 1.3 support alone does not establish that the whole configuration is secure.