Dropped ciphersuites with SHA1 from dbaron.org/ which ssllabs.com/ssltest/analyze.… suggests (newly) breaks only IE11/Win Phone 8.1.
1
3
I haven't seen much commentary on what today's SHA1 news implies about HMACs using SHA1, but figured it was about time to disable it anyway.

Feb 24, 2017 · 7:34 AM UTC

2
1
Next step (for later) is dropping non-AEAD ciphersuites (i.e., CBC-mode), and thus un-supporting Safari 6 (iOS) and Safari 7-8 (iOS & Mac).
Replying to @davidbaron
HMAC-SHA1 is still fine; adversary would need the MAC secret to carry out the same attack.
1