On 2015-03-02 13:32, Hubert Kario wrote:
Not true. In Alexa top 1 million I found at least 439 servers which support only 3DES and have valid certificates. If Firefox removes RC4, I'm sure that this will make this number effectively only larger (80% of servers still support RC4, 15% prefer RC4 over any and all ciphers).
Please note that since 36 (released last week) RC4 is not offered in the initial connection anymore. See:
https://developer.mozilla.org/en-US/Firefox/Releases/36#Security https://bugzilla.mozilla.org/show_bug.cgi?id=1088915 Kurt -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
