On Thu, 10 Nov 2022 01:02:00 GMT, pandaapo <d...@openjdk.org> wrote: > The cache named `signerToCodeSource` in `JarVerifier` is never used now.
I'm not sure. You can probably ask on jdk8u-...@openjdk.java.net. ------------- PR: https://git.openjdk.org/jdk/pull/11072