RFR [12]: 8214140: Remove TLS v1 and v1.1 from SSLContext required algorithms

Xue-Lei Fan xuelei.fan at oracle.com
Wed Nov 28 20:44:15 UTC 2018


Looks fine to me.  I added myself as Reviewer of the CSR.

Xuelei

On 11/28/2018 11:30 AM, Sean Mullan wrote:
> Please review this change to remove TLS v1 and v1.1 from the SE required 
> algorithms for SSLContext. These TLS protocols have various weaknesses 
> and are no longer recommended and are being phased out, and thus should 
> be removed as requirements.
> 
> CSR: https://bugs.openjdk.java.net/browse/JDK-8214443
> webrev: http://cr.openjdk.java.net/~mullan/webrevs/8214140/webrev.00/
> 
> Thanks,
> Sean



More information about the security-dev mailing list