Is it safe for an end user to browse a website that only supports TLSv1 (or other insecure ciphers or protocols), given the following:
- it's a publicly accessible website with no sensitive or private data
- it doesn't require user login, credentials or any other user data whatsoever.
So for all intents and purposes, assume the website is intended to be an
http:// site, but has an SSL cert installed on it that's out of date by modern security standards.
And by safe, I mean they're not open to some type of exploit, other than MITM of course. By exploit here, I mean there's no way a bad SSL cert could be used to install malware on their machine in anyway, correct?