RFR: 8281561: Disable http DIGEST mechanism with MD5 by default
Daniel Fuchs
dfuchs at openjdk.java.net
Fri Mar 4 12:16:05 UTC 2022
On Fri, 4 Mar 2022 12:03:44 GMT, Michael McMahon <michaelm at openjdk.org> wrote:
> I considered that and implemented it that way at the start, but what you would end up with then is users running their code with something like: -DdisabledAlgNames=""
>
> I find that style leads to a much less explicit "opting in" than by making the user explicitly identify the deprecated algorithm by name.
Right - but it would also allow users to opt-in to disable more algorithms by listing them in the property
-------------
PR: https://git.openjdk.java.net/jdk/pull/7688
More information about the net-dev
mailing list