If you care about compatibility with applications that use Schannel for TLS on Windows XP or Windows Server 2003, be aware of which ciphers it supports/doesn't

If you care about compatibility with applications that use Schannel for TLS on Windows XP or Windows Server 2003, be aware of which ciphers it supports/doesn't support: http://msdn.microsoft.com/en-us/library/windows/desktop/aa380512(v=vs.85).aspx http://msdn.microsoft.com/en-us/library/windows/desktop/aa38... Note that there are no ciphers that use AES for encryption in that list. tl;dr: Make sure TLS_RSA_WITH_RC4_128_SHA ("RC4-SHA" in OpenSSL) is in your server's cipher list if you care about Windows XP and removed the 3DES ciphers because they're "too slow."