RFR: 8281561: Disable http DIGEST mechanism with MD5 by default

Daniel Fuchs dfuchs at openjdk.java.net
Fri Mar 4 12:16:05 UTC 2022


On Fri, 4 Mar 2022 12:03:44 GMT, Michael McMahon <michaelm at openjdk.org> wrote:

> I considered that and implemented it that way at the start, but what you would end up with then is users running their code with something like: -DdisabledAlgNames=""
> 
> I find that style leads to a much less explicit "opting in" than by making the user explicitly identify the deprecated algorithm by name.

Right - but it would also allow users to opt-in to disable more algorithms by listing them in the property

-------------

PR: https://git.openjdk.java.net/jdk/pull/7688


More information about the net-dev mailing list