Hacker News new | ask | show | jobs
by RRRA 4542 days ago
Funny how I had just disabled RC4 and DES in my browser... I wonder how can that be your only supported crypto in 2014!
1 comments

For a while, RC4 was recommended because it's immune to the BEAST attack.
A new theoretical attack was published in 2013 that showed that RC4 was still weak in TLS. While the attack was more academic, it did raise questions of what else would be possible.

We often forget that RC4 is a fundamentally broken algorithm.