We will look into this. There is a speed tradeoff on ciphers for sure, such that there was a thread going on Hacker news on other places recently of why nginx ssl was so slow and it was using some really secure, but super slow ciphers by default.

I am fixing this on my development machine now; it will then promptly propagate to the rest of the servers after that.

Was this ever fixed? It still scores a C and is "vulnerable to the BEAST attack".