Current order of ciphers to choose by server side: TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256 TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS1_TXT_DHE_RSA_WITH_AES_256_SHA TLS1_TXT_DHE_RSA_WITH_AES_128_SHA TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA Why CBC is better than GCM? What goals? If speed then why AES_128_SHA256 is better than AES_128_CBC_SHA?