cPanel to add support for ECDSA (ECC) HTTPS SSL certificates

I disagree, many companies will not use Let's Encrypt. We have no plans to, but I would use ECC SSL certificates today if I could.

Let's Encrypt itself supports ECDSA, which sounds like a pretty good argument to support it in cPanel itself.

It is much faster on the CPU to generate and sign, which would help with servers with hundreds of domains.

As pointed out in OP, the underlying services in cPanel already support ECDSA, it is the cPanel services that seem to be the blocker here.

There needs to be a delicate balance between telling people what they're using is not good enough, and allowing insecure communications.

Yes, there will always be an affected group -- but people on Windows 7 need to be informed they're using relic software and insecure systems and be guided to update their browsers and keys as appropriate.

Fair enough, in which case RSA is a relic and insecure system and cPanel should be guided to replace it with ECC.

I feel your response doesn't really help this cause. We have well over 100,000 customers each of which might have 1,000s of customers, so if your solution is to reach out to any and all of them, and not just the ones reaching out, your solution isn't really that great is it?

While my motivation is pressing due to Win7/IE11, because while in an ideal world everyone would be on the newest, we don't live in an ideal world. Also the issue is actually to do with ECC support which is there to replace RSA in the same way that Win10 replaced Win7.

I have no problem with cPanel not supporting old unsupported operating systema like Windows 7.

But there is also problems with IE11 on Windows 8.1.

Windows 8.1 is the only mainstream Microsoft OS supported to the year 2023 and IE11 is only secure with ECC.

Not even the newest Windows 10 version 2004 have support after 2021.

cPanel ugently need to support ECC or there is no access for customers with IE11 on Windows 8.1.

I have never heard of any company to ditch support for currently active Windows Systems and not 3 years before end of life: https://support.microsoft.com/en-gb/help/13853/windows-lifecycle-fact-sheet

There is no reason not to support both ECDSA and RSA. I am a developer for a black-box appliance and I recently added support for both RSA and ECDSA on the web server (you can serve both, and if the device doesn’t support ECDSA, it falls back to the RSA certificate and ciphers). My use case requires RSA, and ECDSA is optional (as I need to support legacy OSes in my black-box product).