http://blog.cloudflare.com/killing-rc4 http://blog.cloudflare.com/killing-rc4 It's to balance the need to protect against BEAST vs RC4 issues. They use an Open

http://blog.cloudflare.com/killing-rc4 http://blog.cloudflare.com/killing-rc4 It's to balance the need to protect against BEAST vs RC4 issues. They use an OpenSSL patch that "disables RC4-based cipher suites for connections using TLS v1.1 and above, while leaving them there to protect users still using TLS v1.0"