I am trying to understand this Google Poodle vulnerability slightly better. So I have a server, one thing I need to do is disable SSL. This is not a problem as the number of users that still use SSL will be low (Windows XP - IE6 I believe).
So, SSL is now disabled, everything is ok.
Here is the problem, to now be PCI Compliant, by June 2016 you have to disable TLS 1.0 support. Not thinking this will be a problem, I went ahead and disabled it on the server. Now I am finding that some common pairings e.g. Windows XP on IE8 can't connect to my website. If they visit my webpage, they are displayed an error that they are unable to connect.
This may not seem like a big deal, because you probably wondering who uses things like XP and IE8. Believe it or not, it is still a very common combination in a lot of big establishments. On one hand, I have no choice but to be PCI compliant, but on the other hand, in doing this, about 5% of my visitors can't view my site (and 5% amounts to a large number).
So, what options do I have? With TLS 1.0 disabled, is there any way to let people without support for TLS 1.1 and higher to view my site?