I'm running an Apache 2 server with Ubuntu 16. Here's my current configuration:
SSLProtocol All -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite
I'm a bit confused as to what I should use for SSLCipherSuite
. I'm taking it from this article here: https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm
Should I configure it with RC4 or without RC4?
An SSL technician told me that "with RC4" is very weak. I'm wanting to confirm and see if there are other things I should know about it.
Questions:
- What is the different between "with RC4" vs "without RC4" and the pros and cons of each?
- Which one should I use?
Thanks!