RFR: 8279842: HTTPS Channel Binding support for Java GSS/Kerberos [v8]

Michael McMahon michaelm at openjdk.java.net
Tue Jan 25 12:50:37 UTC 2022


On Tue, 25 Jan 2022 11:34:57 GMT, Michael Osipov <duke at openjdk.java.net> wrote:

>> Michael McMahon has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   final review update (pre CSR)
>
> src/java.base/share/classes/sun/net/www/http/HttpClient.java line 150:
> 
>> 148:      * "domain:a,c.d,*.e.f" (sent to host a, or c.d or to the domain e.f and any of its subdomains). This is
>> 149:      * a comma separated list of arbitrary length with no white-space allowed.
>> 150:      * If enabled (for a particular destination) then SPNEGO authentication requests will include
> 
> Previously `Negotiate` was used, now `SPNEGO`?

"Negotiate" is the name of the HTTP authentication scheme which uses the SPNEGO mechanism. Possibly makes more sense to refer to Negotiate here.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7065


More information about the core-libs-dev mailing list