RFR: 8347946: Add API note that caller should validate/trust signers to the getCertificates and getCodeSigners methods of JarEntry and JarURLConnection

[Sean Mullan]

On Fri, 14 Feb 2025 07:33:58 GMT, Jaikiran Pai <jpai at openjdk.org> wrote:

> Hello Sean, given the assertable change to the API documentation of `java.net.JarURLConnection.getCertificates()`, which now specifies the order of the returned certificates, would this require a CSR?

Yes, I think we should. I'll do that.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/23616#issuecomment-2659404074