You are right, the final choice of the algorithm is with the server. I am not sure though if it is possible to give other ciphers a higher priority on the serve

You are right, the final choice of the algorithm is with the server. I am not sure though if it is possible to give other ciphers a higher priority on the server without completely disabling RC4 (which is still better than no encryption / no connection). Edit: effhaa mentioned http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslhonorcipherorder http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslhon... for apache in another post.