<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><div><div>On 14 Jun 2013, at 18:40, Michael StJohns wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div>
That's what I get for pawing around in the JDK7 code instead of the JDK8
code... <br><br>
I'm surprised this is a sub interface to private key etc rather than just
having this added to the sun implementations. Doing it
this way isn't backwards compatible and is going to blow up a number of
other providers. </div></blockquote><div><br></div><div>JDK8 gives us magical default methods - so no blow ups.</div><div><br></div><br><blockquote type="cite"><div>Also, there are keys where you really can't
destroy them without physically destroying the container.<br></div></blockquote><div><br></div>Right. Not all implementation classes will be able to take advantage of this.<br><br></div><div><br><blockquote type="cite"><div><br>
In any event - thanks!<br><br>
Mike<br><br>
<br><br>
<br><br>
At 01:17 PM 6/14/2013, Vincent Ryan wrote:<br>
<blockquote type="cite" class="cite" cite="x-msg://68/">Thanks Mike. Both those classes
were extended, as you suggest, for JDK 8:<br>
<a href="http://hg.openjdk.java.net/jdk8/jdk8/jdk/rev/8ee6d45348ba">
http://hg.openjdk.java.net/jdk8/jdk8/jdk/rev/8ee6d45348ba</a><br><br>
A separate effort is also underway to enhance the classes that
implement<br>
SecretKey and PrivateKey.<br><br>
Applications may first check whether a key class is an instance of
Destroyable<br>
or they may call the key's destroy method and handle the possible
exception.<br><br>
<br>
On 14 Jun 2013, at 17:42, Michael StJohns wrote:<br><br>
<blockquote type="cite" class="cite" cite="x-msg://68/">Generic questions for possible
future work:<br><br>
As a general guideline, would it make sense to add
javax.security.auth.Destroyable to the set of interfaces for SecretKey
and PrivateKey implementation objects where possible?<br><br>
Should the methods that use secret and private keys check to see if those
keys implement the Destroyable interface to see if they should call
isDestroyed() from that interface prior to using the key?<br><br>
Mike<br>
</blockquote></blockquote></div>
<br>
</blockquote></div><br></div></div></body></html>