Hacker News new | ask | show | jobs
by breser 4813 days ago
Even though RC4 is fast you really shouldn't be using it: http://www.isg.rhul.ac.uk/tls/
2 comments

There aren't a whole lot of other options yet. https://community.qualys.com/blogs/securitylabs/2013/03/19/r...

You can enable TLS 1.2 ciphers, but there is a large percentage of clients unable to use them, so the fallback is RC4.

> At the moment, the attack is not yet practical because it requires access to millions and possibly billions of copies of the same data encrypted using different keys

So we have some time.

Even Google is using it ;)