Feedback on SSLEngine.setHandshakeApplicationProtocolSelector()

Simone Bordet simone.bordet at
Thu Jan 12 19:04:16 UTC 2017


On Wed, Jan 11, 2017 at 5:57 PM, Simone Bordet <simone.bordet at> wrote:
> Hi,
> I just wanted to report that I have implemented the new mechanism
> provided by SSLEngine.setHandshakeApplicationProtocolSelector() in
> Jetty, and it works well in a much much simpler way.
> The amount of code required now is trivial (a couple of lines), there
> is no need to parse the ClientHello, and we basically tap into the
> existing mechanism that Jetty had.
> No big surprises here since the new JDK mechanism is very similar to
> what Jetty has for JDK 8.

For the record, I have implemented also the client-side mechanism
using the JDK 9 APIs.
Looks simple enough and works fine.

Simone Bordet
Finally, no matter how good the architecture and design are,
to deliver bug-free software with optimal performance and reliability,
the implementation technique must be flawless.   Victoria Livschitz

More information about the security-dev mailing list