An update on ecosystem concerns removing javax.security.cert

Eirik Bjørsnøs eirbjo at gmail.com
Mon Apr 17 19:28:29 UTC 2023


>
> Ideally javax.security.cert would have been removed a long time ago but
> the references from classes in javax.net.ssl make it difficult for both
> implementers and users of the API. So I think we are forced to kick it down
> the road for now.
>

I think we may disagree a bit on the assessment on the difficulty and
impact for implementers and users, but that's OK, I understand we would
need consensus to proceed.

Your effort to track down projects with usages and create PRs is very
> welcome as it helps to move things along.
>

In the "good news" department, my Netty 5 PR was merged today:

https://github.com/netty/netty/pull/13326#event-9027065789

Cheers,
Eirik.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20230417/9f976fee/attachment.htm>


More information about the security-dev mailing list