Figure 1: An oversight with consequences: 16.9% of websites surveyed in May 2018 had at least some RC4 cipher suites enabled; however, an overwhelming majority (80.9%) no longer offer support for these vulnerable ciphers (image source: Qualys SSL Labs [2]).