TLS/SSL has a whole bunch of options that are negotiated between client and server to find one that they can both accept. I speculate that some of these may be

TLS/SSL has a whole bunch of options that are negotiated between client and server to find one that they can both accept. I speculate that some of these may be badly broken by the NSA but the exact ones haven't been revealed so we don't know which ones need taking off the table. Is there anything unusual about the cipher options offered by NSA/GCHQ servers? Or any recent changes at The NYTimes or Guardian's servers.