The recommendations published Friday by two-factor authentication service PhoneFactor, suggest websites use the RC4 cipher to encrypt SSL traffic instead of newer, and ironically cryptographically stronger, algorithms such as AES and DES. Google webservers are already configured to favor RC4, according to this analysis tool from security firm Qualys.