Preferred Server Cipher(s) are misleading

[tyll]

If a TLS server does not have a cipher preference, it uses the first client's cipher that it supports. Therefore it is actually not a preferred server cipher in this case. For example for apache/mod_ssl, the following setting needs to be set to make the server have preferred ciphers:

SSLHonorCipherOrder on