I have a business requirement to use TLS 1.1 or greater and to not use SHA-1 (or RC4).
Are there any known-secure implementations of TLS 1.1 that do not use SHA-1 for the MAC? I can't seem to find any. I am thinking I should just skip past TLS 1.1 at the moment if there are no secure MACs available.