Hi Martin Rex,
unfortunately in my example case I do only control the client side. The server side is controlled by an SAAS/Cloud provider. This cloud provider serves many customers. This is about HR data so the provider might tend to be overprotective.
So you can tell me BSI is a fashion statement. As long as our business partners take it for granted I have no choice but to adapt.
Once again: this is not my choice.
Since this BSI recommendation is three years old this development is no surprise to anybody. But that there is no full solution from SAP and that we had to wait for nearly one year to get half (TLS 1.2) takes us by surprise.
You should know that there was already functionality moved from JAVA to ABAP side. This is reality.
And you should know that people are starting to implement reverse proxies as protocol converters to keep business running. That is reality too.
Migration projects towards PI were stopped. This is reality.
Reality does not care about what you are telling us about BSI.
Regards,
Lutz