Re: Road to RC4-free web (the case for YouTube without RC4)

- Original Message - > From: "Brian Smith" > To: "mozilla's crypto code discussion list" > > Sent: Monday, June 30, 2014 12:23:41 AM > Subject: Re: Road to RC4-free web (the case for YouTube without RC4) > > On Sun, Jun 29, 2014 at 11:18 AM, Hubert Kario wrote: > > > Because of that,

Re: Road to RC4-free web (the case for YouTube without RC4)

On Sun, Jun 29, 2014 at 11:18 AM, Hubert Kario wrote: > Because of that, disabling RC4 should be possible for many users. The big > exception for that was YouTube video servers[4] which only recently gained > support for TLS_RSA_WITH_AES_128_GCM_SHA256. > Hi, I read your blog post at http://sec

Road to RC4-free web (the case for YouTube without RC4)

The number of sites that prefer RC4 while still supporting other ciphers are very high (18.6% in June[1], effectively 21.3% for Firefox[6]) and not changing much. The percent of servers that support only RC4 is steadily dropping (1.771% in April[3], 1.194% in May[2], 0.985% in June[1]). Because o