RC4-MD5
TLS_RSA_WITH_RC4_128_MD5
RC4-MD5 is a completely broken cipher suite. RC4 has multiple practical cryptographic attacks (BEAST, Lucky13, RC4 biases). MD5 is cryptographically broken. Static RSA provides no forward secrecy. RFC 7465 (2015) prohibits RC4 in TLS. Never use this cipher suite – if it appears in your server configuration, remove it immediately.
Key Exchange
RSA
Authentication
RSA
Encryption
RC4
MAC / Integrity
MD5
Details
RC4-MD5 is a historical curiosity that should never appear in any active configuration. RC4 biases were known since the 1990s and became exploitable with BEAST (2011) and subsequent attacks. MD5 collision attacks are practical since 2004. Together, this cipher suite fails every modern security test. Its presence in a TLS configuration indicates a severely outdated or misconfigured server. RFC 7465 formally prohibits RC4.