https://www.ssllabs.com/ssltest/analyze.html?d=portal.aws.amazon.com https://www.ssllabs.com/ssltest/analyze.html?d=portal.aws.am... If your TLS client tried s

https://www.ssllabs.com/ssltest/analyze.html?d=portal.aws.amazon.com https://www.ssllabs.com/ssltest/analyze.html?d=portal.aws.am... If your TLS client tried stronger cipher suites before weaker ones (which only MSIE does, and it considers only RC4 weak), you can get TLS 1.0 with RSA key exchange, AES-256-CBC encryption, HMAC-SHA1 authentication with that server. That's not secure (only TLS 1.2 with PFS and AEAD is secure).