Also makes me think we should be using AES256 at a minimum with SSL and not AES128 anymore.

With AESNI acceleration available on most servers, there is little penalty to upgrade.

They say AES128 is safe until about 2030 but who knows if that took into account super-GPU clusters.

(insert imagine a Beowulf cluster of these... comment here)