On 04/01/2021 23:09, Johannes Kuhn wrote:
This brings up some stuff I wanted to mention for some time:
* Console.cs is one of the fields projects like JRuby hack into (at least in the past). My guess is that they handle encodings in Ruby, and not using the Java facilities for that.
The fact that it is also exported as shared secret for some unrelated stuff (sun.security.util) shows that there might be a need for a supported, public API. This was discussed here at length in 2016 but there wasn't agreement to expose an API at the time. At issue is that Console is an API for reading Strings and char[], not bytes. Maybe it needs to be looked at again but we should minimally change the security password code to use the internal property so that this shared secret can be removed.
-Alan.