RFR: 8357033: Reduce stateless session ticket size [v13]

Bradford Wetmore wetmore at openjdk.org
Thu May 29 16:19:55 UTC 2025


On Thu, 29 May 2025 14:26:06 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/ssl/SSLSessionImpl.java line 326:
>> 
>>> 324:             }
>>> 325: 
>>> 326:             this.useExtendedMasterSecret = false;
>> 
>> This is probably not needed, but ok to stay.  
>> 
>> If you like this style, then you could explicitly add the default `this.preSharedKey = null` for the TLSv1.3+ case around line 340.
>
> It is actually needed because `useExtendedMasterSecret` is final, unlike `preSharedKey`.

Ah, ok.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/25310#discussion_r2114298191


More information about the security-dev mailing list