On Fri, 8 Aug 2025 01:34:52 GMT, Valerie Peng <valer...@openjdk.org> wrote:

>> But I think simply omitting a service name is a better solution because in 
>> such case we can check the algorithm against the whole 
>> `jdk.crypto.disabledAlgorithms` property in one call without specifying the 
>> service name:
>> `CryptoAlgorithmConstraints.permits(algo)`
>
> Well, with the current list of 4 supported services, they don't generally 
> share the algorithm names. Thus, I don't see a lot of sense of doing this. 
> Personally, I'd view omitting of service as an oversight. Not sure how 
> commonly used it is. If there is no strong need for supporting wildcard, then 
> I'd not do it at least for this iteration. This is my personal preference. If 
> there are strong reasons and usage scenarios driving wildcard support, then I 
> am open for it.

I see, makes sense.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/26377#discussion_r2262799299

Reply via email to