RFR 8227530: Session Resumption without Server-Side State off by default

Xuelei Fan xuelei.fan at oracle.com
Wed Jul 10 15:18:39 UTC 2019

I may move the content under the "Specification" section to the 
"Solution" section, as it is about the implementation details.  Not a 
big concern of mine.  You can leave it as-is. I added myself as the 


On 7/10/2019 7:57 AM, Anthony Scarpino wrote:
> Hi
> Can I have a CSR review of this very simple change to turn stateless 
> session resumption off by default
> https://bugs.openjdk.java.net/browse/JDK-8227530
> Tony

More information about the security-dev mailing list