RFR: 8209992: Align SSLSocket and SSLEngine Javadocs [v2]

Artur Barashev abarashev at openjdk.org
Mon Jul 28 14:18:55 UTC 2025


On Fri, 25 Jul 2025 20:13:00 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:

> The renegotiation wording should probably updated in both the SSLSocket/SSLEngine section. As was pointed out, TLSv1.3 is not a full renegotiation.
> 
> You could soften some of the wording with something like (needs wordsmithing):
> 
> ```
> The behavior of this method is protocol- and possibly implementation- dependent:  For 
> example, in TLSv1.2 and earlier could do X, and in TLSv1.3 calling this method would do
> Y.
> ```
> 
> I think the submitter was also asking for a similar layout/wording between the two, while highlighting the differences where needed. This would make the learning curve a bit smaller.
> 
> This probably will need a CSR.

Good point, I pushed an update. While both methods are similar, they are not the same due to the very nature of SSLEngine. So I made the first 2 paragraphs of the javadoc the same for both methods, the highlighting the differences follows in next paragraphs.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/26484#issuecomment-3127444430


More information about the security-dev mailing list