It's a general problem; what if the client list contains stronger ciphers but they appear after the weaker ones?
We modified code so that the server side can have its own ordered list, and it
will search through that list from what the client offers.
If I can get the patches released, is there any interest?
/r$
--
Principal Security Engineer
Akamai Technology
Cambridge, MA
