RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite [v4]

Artur Barashev abarashev at openjdk.org
Mon Nov 4 15:05:33 UTC 2024


On Sat, 2 Nov 2024 19:40:31 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:

> It may be personal, but I think the wildcard's solution is much simple: simple to use, simple to implement and simple to extension, simple to back-port, and user friendly. It adds new learning curve if we adding something like "kx", which does not show elsewhere except here. I don't think we want it if wild-card solution works.
> 
> I will review the PR using wild-card next week.

Yes, it is much simpler indeed. We are having discussions to decide on the final design.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/21577#issuecomment-2454951890


More information about the security-dev mailing list