We are considering disabling TLS1.0 and TLS1.1 in the policies for a browser used organization-wide. We already have a primary browser, where >=TLS1.0 is enabled (i.e. SSLv3 is disabled). We do not know if any sites the user uses, uses
Best practice is to use TLS1.2 and additionally disable RC4- and 3DES-ciphers. It only refers to web server configuration of the SSL/TLS-cihper suites and not really to the client side.
What are the benefits and disadvantages of disabling support for TLS1.0/TLS1.1 client side? How is the user further secured? Could an attacker e.g. force use of a 3DES-TLS1.0-cipher (if the user visits a page using this) or does an attack like that only make the web server vulnerable?