[Cryptography] RC4 again (actual security, scalability and other discussion)

[Salz, Rich]

I'm not sure what to say, or what I can say except that, based on conversations I had with the browser reps who were at the meeting last week, and have discussions with the HTTP/2 WG chair (who works in my business unit), I stand by what I wrote.  All of IE, FF, Chrome, are going to do http URI's over TLS as part of their rollout for HTTP/2, in varying degrees, and to varying timetables.

I know "proof by assertion" isn't, but sadly that's the best I can do right now.

	/r$ 


--  
Principal Security Engineer
Akamai Technology
Cambridge, MA