I'm running an Apache 2 server with Ubuntu 16. Here's my current configuration:
SSLProtocol All -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite
I'm a bit confused as to what I should use for
SSLCipherSuite. I'm taking it from this article here: https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm
Should I configure it with RC4 or without RC4?
An SSL technician told me that "with RC4" is very weak. I'm wanting to confirm and see if there are other things I should know about it.
- What is the different between "with RC4" vs "without RC4" and the pros and cons of each?
- Which one should I use?