<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><br><div><br><blockquote type="cite"><div>On Sep 1, 2023, at 7:32 AM, Dan Heidinga <heidinga@redhat.com> wrote:</div><br class="Apple-interchange-newline"><div><div dir="ltr"><div>First, thanks Ron for the detailed write up on this - it certainly helps to clarify the context of the change.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Sep 1, 2023 at 9:24 AM Alan Snyder <<a href="mailto:javalists@cbfiddle.com">javalists@cbfiddle.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><br><div><blockquote type="cite"><div>On Sep 1, 2023, at 5:08 AM, Ron Pressler <<a href="mailto:ron.pressler@oracle.com" target="_blank">ron.pressler@oracle.com</a>> wrote:</div><br><div><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;float:none;display:inline">In other words, it’s extremely hard for the author to know whether their application is carrying knives or not, and if so where to look if its handling them safely.</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"></div></blockquote></div><br><div>Indeed. How does the flag solve this problem?</div></div></blockquote><div><br></div><div> The flag is the user saying "I'm OK if my application carries knives" and many users of many applications will be just fine with saying that. Those who aren't ok are the same users who have historically opted into using the SecurityManager to restrict access to linking dynamic libraries. The change here is to make the integrity of the platform the default and the opt-out explicit. It's a pain now but part of a path to a better place for the ecosystem.</div><div><br></div><div>--Dan</div></div></div>
</div></blockquote></div><br><div>I don’t think that answers my question.</div><div><br></div></body></html>