Contact Amazon to improve CloudFront's security, which will secure myOSIsoft downloads

AVEVA's PI products are hosted on CloudFront, which currently scores a B out of a maximum of A+ on the Qualys SSL Server Test (https://www.ssllabs.com/ssltest/analyze.html?d=d3ge87uu8tftqp.cloudfront.net) due to still supporting TLS 1.0 and TLS 1.1. OSIsoft customers that are using very old browsers (which they shouldn't) are at risk of a man-in-the-middle attack, where the attacker can serve the customer a malicious install kit, get the install kit for free, etc. In addition, other changes can be made to make the downloads not only more secure, but also faster. Please contact Amazon to make the changes listed below. The concerns mean more when they come from a corporate customer like AVEVA rather than from a guy that isn't in their database.

• Drop support for TLS 1.0, TLS 1.1, and weak cipher suites for TLS 1.2

• Submit all of their CloudFront subdomains for HSTS preloading (https://hstspreload.org/?domain=d3ge87uu8tftqp.cloudfront.net)