As of the latest upgrade of Safari Apple now gives a warning dialog if a site uses https with TLS 1.0 or 1.1 (as per the NSA directive to discontinue all use of said versions).
Tomcat 9.0.35 (the latest available via ports on FreeBSD) defaults to TLS 1.1 when SSLProtocol="TLS". As per the above warning in Safari and the reason for it shouldn't Tomcat default to 1.2+ (I fixed it by adding sslEnabledProtocols="TLSv1.2" which as far I was able to determine is not documented anywhere except for the following on StackOverflow: https://stackoverflow.com/questions/9749339/does-tomcat-support-tls-v1-2) -- Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org