It won't be easy) As you know there are new PCI DSS requirements after 30 June which say we shouldn't use "SSL/early TLS".
But also there is the comments that merchants could save TLS 1.0 but with compensating controls:
"For merchants using SSL/early TLS other than as allowed for POS POI terminal connections:
1) If SSL/early TLS is being used as a security control for PCI DSS after the 30 June deadline, ensure compensating controls are implemented to mitigate the risk associated with its use and take the necessary steps to migrate to a secure alternative as soon as possible.
2) If SSL/early TLS is present but not being used as a security control to meet a PCI DSS requirement, these protocols may remain in use. However, it is strongly recommended that they be migrated to a more modern encryption protocol as soon as possible."
My company has an ecommerce business and wants to save TLS 1.0 for some clients. The key question - what's the compensating controls for this case? I'm talking about usual web access from public Internet.
PS I just checked - even world ecommerce giants like Ebay and Amazon still support TLS1.0 for clients. Is it because of compensating controls?