There have been a large number of SSL/TLS vulnerabilities over the last several years. It is quite hard to find current information about which of these are still relevant and require practical mitigation at the server-side and which have been superseded by things like client-side updates.
Which of these issues is still a problem requiring mitigation at the server-side in 2016?
- CCS Injection
For example per https://blog.qualys.com/ssllabs/2013/09/10/is-beast-still-a-threat it appears that BEAST no longer requires server side mitigation, as it has client-side mitigation.