<div dir="ltr"><div><div><div><div><div><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 5, 2023 at 12:49 PM Ron Pressler <<a href="mailto:ron.pressler@oracle.com">ron.pressler@oracle.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
<br>
> On 5 Sep 2023, at 10:55, Simon Nash <<a href="mailto:simon@cjnash.com" target="_blank">simon@cjnash.com</a>> wrote:<br>
> <br>
> On 04/09/2023 10:48, Ron Pressler wrote<br>
>> <br>
>> The end user of your application need not see the warning at all. If you, as the application author, pick a runtime based on a JDK version that has this warning for your application, then *you*, as the application author, will pass the flag to the Java runtime. Your application’s end user need not know about any Java flags; they need not even know your application is a Java application. These are all internal details of your application.<br>
>> <br>
> As I explained in an earlier message, I can release a new version of my application that has this change (I will use the new attribute in the launcher jar) but many users are still using older versions of the application without this change. They will see the scary warning and will not know what they need to do to make it go away.<br>
<br>
<br>
They will only see a warning if they configure the old version of your application to use a new Java runtime that they themselves provide. If they are developers who know how to use the JDK and configure its launcher to run your application, then why would they be scared? If they’re not developers, how would they obtain a new version of the Java runtime and configure your application to use it?<br>
<br>
I’m trying to understand how such a situation could arise and what kind of users we’re talking about.<br></blockquote><div><br></div><div>That would be a pretty normal scenario.<br><br></div><div>A new version of the Java runtime could be pushed to a user by:<br><br></div><div>* The OS vendor, in a patch or update<br></div><div>* If in an organization, by the organization's IT department<br></div><div>* Ditto by an organization's security team <br></div></div>* Installation of a different application that updates Java as a side-effect<br><br></div>And probably a number of others. The point is that virtually none of us live in a<br></div>perfect idealized world; we generally have to work under the assumption that our<br></div>code could be used in a variety of different environments, including different java<br></div>versions, and that we have no control whatsoever.<br></div><div><div><div><div><div><div><br><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature">-Peter Tribble<br><a href="http://www.petertribble.co.uk/" target="_blank">http://www.petertribble.co.uk/</a> - <a href="http://ptribble.blogspot.com/" target="_blank">http://ptribble.blogspot.com/</a></div></div></div></div></div></div></div></div>