On Fri, 20 Mar 2026 16:39:52 GMT, Artur Barashev <[email protected]> wrote:

>> Implement certificate compression in TLS 1.3 using internally supported ZLIB 
>> compression algorithm. See RFC 8879 for more details:
>> https://datatracker.ietf.org/doc/html/rfc8879
>
> Artur Barashev has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   Add 8372526 bug number to HTTP tests

src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 1:

> 1: /*

I need to think about this some more:  why does this need to be configurable by 
an app?  It's not really setting security options/properties, it's just 
controlling whether an enhancement should be used.

Current settable security properties:  alg constraints, application protocols, 
protocols/ciphersuites, endpoint alg, namedGroups, client auth, protocol, SNI, 
Sigs, ordering of ciphersuites.  All are needed.  The only thing kind of close 
is packetsize, but that has a very specific purpose too.  

TBC next week.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2968865364

Reply via email to