On Fri, 25 Jul 2025 20:13:00 GMT, Bradford Wetmore <wetm...@openjdk.org> wrote:

> The renegotiation wording should probably updated in both the 
> SSLSocket/SSLEngine section. As was pointed out, TLSv1.3 is not a full 
> renegotiation.
> 
> You could soften some of the wording with something like (needs wordsmithing):
> 
> ```
> The behavior of this method is protocol- and possibly implementation- 
> dependent:  For 
> example, in TLSv1.2 and earlier could do X, and in TLSv1.3 calling this 
> method would do
> Y.
> ```
> 
> I think the submitter was also asking for a similar layout/wording between 
> the two, while highlighting the differences where needed. This would make the 
> learning curve a bit smaller.
> 
> This probably will need a CSR.

Good point, I pushed an update. While both methods are similar, they are not 
the same due to the very nature of SSLEngine. So I made the first 2 paragraphs 
of the javadoc the same for both methods, the highlighting the differences 
follows in next paragraphs.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/26484#issuecomment-3127444430

Reply via email to