Re: Another one for the hall of shame
"Incidentally, SSL Labs hand out an A+ for the top grade"
I can make an Exchange server get an A+ with HAProxy on the front. Unfortunately MS can't make Outlook Anywhere understand TLS 1.2 (Outlook 2013 and earlier)
The latest PCI DSS will deprecate SSL completely and TLS1.0 as of June 2016.