Security scan finds TLS 1.0 enabled

Issue

A security scan finds that TLS 1.0 is enabled, and needs to be disabled, for a domain.

Resolution

If you are using Acquia Cloud Edge, please go to your CDN account and hit "Crypto" button to access the settings in that category, and change "Minimum TLS Version" from "TLS 1.0 (default)" to "TLS 1.1" . If you do not have access to your organizations CDN settings, then file a ticket with Acquia Support.

Cause

Acquia Cloud Edge CDN is allowing TLS 1.0, by a default, even though Acquia Cloud has removed it starting in version 1.102 as described in https://docs.acquia.com/acquia-cloud/release-notes/ since late 2017. Adding the Acquia Cloud Edge (CDN) component to your stack can allow it again, but also allows you great control over exactly what is served.