Not So Fast on BEAST Attack MitigationsThe BEAST attacks, once thought mitigated, may again be viable because of weaknesses in RC4 rendering server-side mitigation moot, and Apple's reluctance to enable a 1/1-n split client-side mitigation by default.
Source:
Not So Fast on BEAST Attack Mitigations