It’s time to let it die IMHO.
Given that XP doesn’t support newer crypto options or sni, the fact is it’s days are limited anyway…
Should start putting notices for xp on non HTTPS sites, and not redirect them to HTTPS. Same for stagnant android <4 … Varyby user-agent for proxies…