Re: Issues with ALPN implementation in JDK 9

[Jason T. Greene]

> On Jun 14, 2016, at 7:04 PM, Greg Wilkins <gr...@webtide.com> wrote:
> 
> If SslEngine is changed to allow the negotiated application protocol to be 
> set up until the time the hello response was wrapped, that would fix the 
> problem.  Would it create any others?

Well the fundamental issue is that the application protocol isn't a direct 
function of a cipher, rather the application protocol has a policy of allowed 
ciphers and optimal selection is finding the most recent protocol with a 
matching allowed cipher.