Since prioritising RC4 is the mitigation for the BEAST attack as well (IMHO a rather impractical attack on SSL, but that's another story) it's going to be the d

Since prioritising RC4 is the mitigation for the BEAST attack as well (IMHO a rather impractical attack on SSL, but that's another story) it's going to be the default on a lot of servers already. You'll find that Google, Facebook and Microsoft servers all prefer RC4 during SSL negotiation. See: https://www.ssllabs.com/ https://www.ssllabs.com/ TLS_RSA_WITH_RC4_128_MD5 - www.microsoft.com TLS_RSA_WITH_RC4_128_SHA - www.facebook.com TLS_ECDHE_RSA_WITH_RC4_128_SHA - www.google.com In most circumstances I would consider AES a "better" cipher than RC4, but it's interesting there are now multiple attacks where block boundaries matter.