RFR: 8209992: Align SSLSocket and SSLEngine Javadocs [v2]
Artur Barashev
abarashev at openjdk.org
Mon Jul 28 14:18:55 UTC 2025
On Fri, 25 Jul 2025 20:13:00 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:
> The renegotiation wording should probably updated in both the SSLSocket/SSLEngine section. As was pointed out, TLSv1.3 is not a full renegotiation.
>
> You could soften some of the wording with something like (needs wordsmithing):
>
> ```
> The behavior of this method is protocol- and possibly implementation- dependent: For
> example, in TLSv1.2 and earlier could do X, and in TLSv1.3 calling this method would do
> Y.
> ```
>
> I think the submitter was also asking for a similar layout/wording between the two, while highlighting the differences where needed. This would make the learning curve a bit smaller.
>
> This probably will need a CSR.
Good point, I pushed an update. While both methods are similar, they are not the same due to the very nature of SSLEngine. So I made the first 2 paragraphs of the javadoc the same for both methods, the highlighting the differences follows in next paragraphs.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/26484#issuecomment-3127444430
More information about the security-dev
mailing list