RFR 8056174: New APIs for jar signing

Sean Mullan sean.mullan at oracle.com
Thu Nov 19 12:58:35 UTC 2015


On 11/18/2015 09:54 PM, Wang Weijun wrote:
>> In AlgorithmId.getDefaultSigAlgForKey, I think you can remove the
>> last sentence ("Remember ...") - this seems like a ToDo note to
>> yourself which has been done.
> It's a reminder if we update it again in the future.

Ok.

> It makes me feel a little uncomfortable that the rule is coded inside
> java.base but the spec is in jdk.jartool, although most likely we
> don't suggest users mixing modules from different releases.

I think it's ok, since the base module must always be present.

--Sean



More information about the security-dev mailing list