RFR[13]: 8227551 Session Resumption without Server-Side State off by default

Anthony Scarpino anthony.scarpino at oracle.com
Wed Jul 17 18:06:35 UTC 2019


I'm going to take a suggestion posted by Jamil privately to instead use

     statelessSession = Boolean.parseBoolean(st);

Given it's a one liner and the tests have all passed, I'm not going to 
repost the webrev

Tony

On 7/16/19 8:43 PM, sha.jiang at oracle.com wrote:
> Hi Tony,
> Just a minor comment.
> 
>   242             if (st.compareToIgnoreCase("true") == 0) {
>   243                 statelessSession = true;
>   244             }
> Could it simply use the below statement?
> statelessSession = st.equalsIgnoreCase("true");
> 
> Best regards,
> John Jiang
> 
> On 2019/7/17 11:12, Anthony Scarpino wrote:
>> Please review the change to set stateless session resumption off default
>>
>> http://cr.openjdk.java.net/~ascarpino/8227551/webrev/
>>
>> Thanks
>>
>> Tony
>>




More information about the security-dev mailing list