diff --git a/lib/vhost-sni-server.js b/lib/vhost-sni-server.js
index 8590dcc..75e61e6 100644
--- a/lib/vhost-sni-server.js
+++ b/lib/vhost-sni-server.js
@@ -447,8 +447,10 @@ module.exports.create = function (securePort, certsPath, vhostsdir) {
       key:          localDummyCerts.key
     , cert:         localDummyCerts.cert
     , ca:           localDummyCerts.ca
-                    // changes from default: disallow RC4
-    , ciphers:      "ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:AES128-GCM-SHA256:!RC4:HIGH:!MD5:!aNULL"
+    // io.js defaults have disallowed insecure algorithms as of 2015-06-29
+    // https://iojs.org/api/tls.html
+    // previous version could use something like this
+    //, ciphers:      "ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:AES128-GCM-SHA256:!RC4:HIGH:!MD5:!aNULL"
     };
 
     function addSniWorkaroundCallback() {