TLS_RSA_WITH_AES_256_GCM_SHA384

TLS_RSA_WITH_AES_256_GCM_SHA384 is the 256-bit variant of static RSA key exchange. Despite using AES-256 for encryption, the lack of perfect forward secrecy makes this cipher suite insecure by modern standards. If the server's RSA private key is compromised, all recorded sessions can be decrypted retroactively. This enables "harvest now, decrypt later" attacks, where adversaries record encrypted traffic and decrypt it when quantum computers become available. Static RSA cipher suites are deprecated and disabled in TLS 1.3. They should never be used except for legacy compatibility.