Killing RC4 (softly)

What this post added

This post addresses the evolution of TLS security by detailing the deprecation of RC4 cipher suites for TLS v1.1 and above. It explains the historical context of preferring RC4 to mitigate BEAST attacks, the subsequent discovery of RC4 vulnerabilities, and the challenge of selectively disabling RC4 due to limitations in open-source web servers. Cloudflare's contribution is a patch for OpenSSL that allows RC4 to be used only for TLS v1.0 connections, while disabling it for newer, more secure protocols, thereby improving overall website security and SSL Labs ratings.