When you access a Web site over an encrypted connection, you‘re using a protocol called HTTPS. But not all HTTPS connections are created equal. In the first few milliseconds after a browser connects securely to a server, an important choice is made: the browser sends a list of preferences for what kind of encryption it‘s willing to support, and the server replies with a verification certificate and picks a choice for encryption from the browser‘s list. These different encryption choices are called „cipher suites.“ Most of the time, users don‘t have to worry about which suite the browsers and servers are using, but in some cases it can make a big difference.