Thanks for the additional information, we will review it. For tracking purposes I filed the follow JIRA. It should not be confused with a commitment to add such an API point, its resolution may indeed be ‘will not fix’, but it will contain a summary and record of the discussion and ultimate conclusion ( which we'll post to the list too ).
https://bugs.openjdk.java.net/browse/JDK-8213309 -Chris. > On 2 Nov 2018, at 15:47, Anders Wisch <and...@featureshock.com> wrote: > > Regarding the dummy TrustManager point, in my experience trust and hostname > verification are > separate steps (at least in Java’s implementation of SSL). Here are some > tests: > > @Test > public void selfSignedHostnameVerified() throws Exception { > ...