Whats the difference between AES and RC4 ciphers?
RC4 has several security weaknesses – see here. So why should you use it? Well IE6 doesn’t have AES for starters. IE7 will have support for it, but in the meantime it is needed for compatibility reasons. Fortunately SSL sessions are relatively short lived, so the security impact is fairly minimal. Its also very small and fast – so for embedded systems that have size/speed requirements, then RC4 is the cipher of choice. To enable RC4 as the first choice of cipher, go to mconf->SSL Library->Protocol Preference->Low. AES stands for Advanced Encryption Standard and is the replacement for the weaker DES cipher. This is a block cipher chosen for general use by the U.S. Government. axTLS supports 128 and 256 bit keys. It’s also slower than RC4 (particularly the 256 bit version). Mozilla/Firefox and IE7 supports AES (I’m not sure of other browsers) but IE6 does not. To enable AES as the first choice of cipher, go to mconf->SSL Library->Protocol Preference->Medium (AES128), or mconf->SSL Librar
