coates’s avatarcoates’s Twitter Archive—№ 12,371

  1. Nerds: is it really OK to only enable the RC4 ciphers for HTTPS? Enabling AES (or other CBC ciphers) allows BEAST. Is RC4 sufficient?