#ciphers

TLS/SSL

Weak ciphers explained: RC4, 3DES, and why 'it still works' is not safe

Your site has a padlock and HTTPS works fine — so why does the scan flag a weak cipher? Because 'the connection succeeded' and 'the connection was strong' are not the same thing.

TLS/SSL

Is my SSL/TLS actually secure? A plain-English checklist

The padlock only means encrypted, not strong. Real TLS security depends on three things: which protocols you accept, which ciphers you offer, and your certificate's health.