RFR 8056174: New APIs for jar signing
Sean Mullan
sean.mullan at oracle.com
Thu Nov 19 12:58:35 UTC 2015
On 11/18/2015 09:54 PM, Wang Weijun wrote:
>> In AlgorithmId.getDefaultSigAlgForKey, I think you can remove the
>> last sentence ("Remember ...") - this seems like a ToDo note to
>> yourself which has been done.
> It's a reminder if we update it again in the future.
Ok.
> It makes me feel a little uncomfortable that the rule is coded inside
> java.base but the spec is in jdk.jartool, although most likely we
> don't suggest users mixing modules from different releases.
I think it's ok, since the base module must always be present.
--Sean
More information about the security-dev
mailing list