8043200,8050158 :RC4 preference re-ordering.
Xuelei Fan
xuelei.fan at oracle.com
Tue Jul 15 13:59:14 UTC 2014
Looks fine to me.
Thanks,
Xuelei
On 7/15/2014 1:24 AM, Seán Coffey wrote:
> Looking to backport this change to jdk7u-dev. Best security practice
> would be to lower the preference ordering of RC4 ciphersuites. This is
> work that's already in progress for JDK 8u and JDK 9.
>
> For JDK 7u, I'd also like to introduce a compatibility flag which will
> reverse this change in case legacy applications run into issues with the
> preference re-ordering. It won't be available in 8u & 9. CCC approval
> has been granted.
>
> http://cr.openjdk.java.net/~coffeys/webrev.rc4.7u.v2/webrev/
>
> regards,
> Sean.
More information about the security-dev
mailing list