code review request: 6911951: NTLM should be a supported Java SASL mechanism
Michael McMahon
michael.x.mcmahon at oracle.com
Thu Aug 26 12:24:19 UTC 2010
Weijun Wang wrote:
> The internal structure of NTLMAuthentication is changed and that's why
> I changed the serialVersionUid as well. If unchanged, I guess the old
> serialized form can still be accepted by the new class, but all new
> field will become null/0. After the change, any such deserialization
> should throw a exception immediately.
>
> Of course this means if someone really depends on serialization to
> work between different versions of JDK, it would be broken. Is there a
> reason why this class, child of AuthenticationInfo, child of
> AuthCacheValue, is declared Serializable at the beginning?
>
It seems to be historical, and may have been used in the earliest days
when the code was part of a browser.
I guess it doesn't matter really then whether the serial uid is changed
or left the same. It's an implementation
class, and not public.
Thanks
Michael.
More information about the security-dev
mailing list