New answers tagged attack-prevention
If you have clients that require old cipher suites, then make them VPN in to your webserver. The VPN session can mitigate the risks. If that isn't an option, lock them down by IP address. You can do this with a dedicated server such as legacy.company.com for clients that can't or won't upgrade
I don't think so, at least not with IE (per this page on Wikipedia). Between RC4 and CBC there really aren't any good SSLv3 cipher suites to use.
Top 50 recent answers are included