Re:Why Android SSL was downgraded from AES256-SHA to RC4-MD5...
by xnyhps on Monday October 14, 2013 @02:44PM
(#6548872)
Eh, no. Maybe in SSLv2, but the first thing TLS encrypts is a hash of the entire handshake. Modifying the cipher list would change those hashes into something different.
Unless you have a client which will happily disable a cipher and try again when encountering an error. But if you do that, you don't deserve any security.
Unless you have a client which will happily disable a cipher and try again when encountering an error. But if you do that, you don't deserve any security.