I'm seeing TLS_RSA_WITH_NULL_SHA cipher is being listed when I do a TLS_1.2 connection test using TestSSLServer tool. I remember a while back some security test tool reported NULL cipher should be deprecated and it is not a good practice to implement for a secure application.
My question here is how risky would it be to have RSA_WITH_NULL_SHA in my application where security is a major concern.
Any suggestions/comments/thoughts are most welcome.