RFR: 8349583: Add mechanism to disable signature schemes based on their TLS scope [v3]

Artur Barashev abarashev at openjdk.org
Mon Feb 24 19:55:56 UTC 2025


On Mon, 24 Feb 2025 19:26:46 GMT, Anthony Scarpino <ascarpino at openjdk.org> wrote:

>> We can't introduce new public API with this change, `SSLCryptoScope` isn't public.
>
> Which public API is interfering with this?

We can't make `SSLCryptoScope` public, it's not visible to `DisabledAlgorithmConstraints` otherwise as they are in different modules.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/23681#discussion_r1968330892


More information about the security-dev mailing list