I'm trying to configure my webserver for perfect forward secrecy.
the problem is that, at least on mac os 10.9, all major browsers (chrome, firefox, safari, all up to date) will use RC4 as the cipher (TLS_ECDHE_RSA_WITH_RC4_128_SHA)
Disabling RC4 on the server will result in an ssl error on the client.
what I'm doing wrong, and is it reasonable to have pfs with a not-to-secure cypher?
edit: now I'm using
It works with chrome and safari, but firefox 25 fails to establish a connection