3DES isn't as easy to exploit versus, say SSLv3 and RC4 which were both quickly removed.
You can never imagine how many people are still using WinXP, or other forgotten legacy clients/servers that only support up to TLS 1.0 and RC4/DES/3DES without realizing it.
XP still has 0.38% of market share (specifically Windows non-mobile platforms) according to [1], not sure about absolute numbers.
>If you remove 3DES, the TLS connection will simply fail.
Strong backwards compatibility is great, but continuing to run XP 10+ years after EOL is a personal choice and its remaining users should not expect the world to continue to accomodate them forever. I don't think it's unreasonable to deny them service in this case.
[1] https://gs.statcounter.com/os-version-market-share/windows/d...
For sites like Google, it's still too large to ignore.
Also, a fun fact: Google still serves plain HTTP for really old clients, just in case the client barely supports HTTPS.
Machines visiting sites with statcounter tracking widgets (and presumably not running with scripts/cookies disabled etc. ).
That works out to be ~5ish million internet connected XP machines, apparently[1].
>For sites like Google, it's still too large to ignore.
They do this sort of thing all the time [2]. IIRC Reader still had several million users when it got the axe.
[1] https://www.computerworld.com/article/2091600/youre-not-real...