RFR: 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server [v20]

Xue-Lei Andrew Fan xuelei at openjdk.org
Thu Oct 24 18:53:14 UTC 2024


On Thu, 24 Oct 2024 15:38:59 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

> The goal is to help users to debug this situation so we provide the only possible cause we know about.

Then you introduce more confusing for your unknown parts.  You may never know why it happens but it just happens.  What we want to do here could be describing what is happening, instead of guess why it happens.  Applications may know better than us about what could be the reason.  Timeout may be just one of many reasons.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/21043#issuecomment-2436115435


More information about the security-dev mailing list