Re: [TLS] RC4 Considered Harmful (Was: RC4 deprecation path)

[[e-mail] (Martin Rex)]

Alyssa Rowan wrote:
>
> > 1.56% or TLS servers support only RC4.
> 
> Partly because of PCI compliance testers making noise about BEAST, I'm
> thinking.

BEAST was and still is a pretty stupid hype.

Even the ssl test at qualys is still making bogus claims about
servers not being BEAST-patched.  Unless your server is a SSL-VPN server
or will boldly execute client-supplied active content, there can not
possibly be a BEAST vulnerability in the TLS server.


The larger problem with the use of RC4 is that a number of dense
TLS clients (e.g. Java) send RC4 cipher suites at the very beginning
of the list of cipher suites, and a number of dense TLS server
choose the first shared cipher from the list proposed by the client
rather then the first shared cipher from the list configured by the
server admin.


-Martin