# Does RC4 continue to be used anywhere?

RC4 in TLS is now broken. But the breaking seems to have a lot to do with how web transactions work in general. Is there any application outside of the web where RC4 is still used? I know that WEP is long out of the window. Any other widely used applications?

• But the breaking seems to have a lot to do with how web transactions work in general. – Erm, no… the “breaking” comes from RC4’s shuffling/permutation and affects RC4 as well as all ciphers that use similar constructions as random permutation. The result is plenty of bias, which can be (and was) exploited. For more info on all that, check the answers to Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?. Also, it probably doesn’t hurt to check other Q&As tagged RC4. – e-sushi Jul 31 '16 at 10:31