I think we can leave it at Modern, but maybe a bit more notice as to what the change could bring, especially those using a proxy?

Yeah, a ‘breaking change’ note would work, warning that it drops TLSv1.2.

Thanks for the input. I think we are going to cut a 3.7.1 that drops the default to

intermediate

.

Works for me.