By mid-2026, Windows domain controllers will default to allowing only AES-SHA1, with RC4 disabled unless administrators explicitly re-enable it. Microsoft says eliminating RC4 proved complicated due ...
RC4 encryption has been cracked for over a decade. Now Microsoft is slowly sweeping the last remnants, such as in Kerberos, away.