You can enable TLS 1.2 ciphers, but there is a large percentage of clients unable to use them, so the fallback is RC4.
> At the moment, the attack is not yet practical because it requires access to millions and possibly billions of copies of the same data encrypted using different keys
Comments
Even though RC4 is fast you really shouldn't be using it: http://www.isg.rhul.ac.uk/tls/
There aren't a whole lot of other options yet. https://community.qualys.com/blogs/securitylabs/2013/03/19/r...
You can enable TLS 1.2 ciphers, but there is a large percentage of clients unable to use them, so the fallback is RC4.
> At the moment, the attack is not yet practical because it requires access to millions and possibly billions of copies of the same data encrypted using different keys
So we have some time.
Even Google is using it ;)