Many web servers still use outdated cryptographic methods such as RC4 or SSL. Insufficient authentication or inappropriate encryption may result in attackers being able to read or change communications between web servers and clients. The same applies to communications between a web server and other servers, such as load balancers.