CyanogenMod merged a "fix" into the repo earlier today: http://review.cyanogenmod.org/#/c/51771/ http://review.cyanogenmod.org/#/c/51771/ ... only to revert i

CyanogenMod merged a "fix" into the repo earlier today: http://review.cyanogenmod.org/#/c/51771/ http://review.cyanogenmod.org/#/c/51771/ ... only to revert it later: http://review.cyanogenmod.org/#/c/51794/ http://review.cyanogenmod.org/#/c/51794/ The revert noted "TLS v1.0 + AES is a bad combo, and entirely possible to happen with these priority lists". In other words, the proposed "quick fix" was dangerous. There's some reading material on BEAST attacks here: https://blogs.akamai.com/2012/05/what-you-need-to-know-about-beast.html https://blogs.akamai.com/2012/05/what-you-need-to-know-about...