On: The Web is World-Wide, or who still needs RC4?

[gnu8]

Assuming you actually represent google, can you link to the bug, or paste bin if your bug tracker isn't publicly accessible?

I'm curious to know what was the basis of this configuration decision. It seems like someone went out of their way to hamstring your encryption. Possibly someone benchmarked every combination and disabled all but the fastest. Wouldn't something like this go through a security review before hitting prod?

[mrb → gnu8]

Sorry, this is an internal bug tracker, so I am not allowed to share any detail.

[sitkack → mrb]

I tried to find a normal channel to report this and came up empty. In the future, how does on alert google to issues like this?

[mrb → sitkack]

In that case, a Youtube issue, go to https://www.youtube.com/t/contact_us, click "Current Site Issues", and follow the instructions.