title: gracefully rejecting RC4 https connections
body: <p>Due to security concerns, we are looking at potentially disabling the RC4 cipher on our web server (Windows 2008 R2) and forcing web clients who are connecting with us to use a more secure protocol (AES128 or AES256)</p>
  
  <p>From what I understand, IE8 running on XP doesn't support these better protocols, which would mean we would be cutting off this segment of our user base. (Management is aware of this implication and is ok with it).</p>
  
  <p>My question is...is there a way to configure my site so these rejected Https connections are handled in a user friendly manner? If someone tries to navigate to <a href="https://mysite.com" rel="nofollow">https://mysite.com</a> and an SSL/TLS negotiation fails, I would assume the end user is going to get some cryptic browser message which would be outside of my control. So I can't tell them that using an alternative browser would resolve the issue.</p>