On Thu, 13 Jan 2022 12:10:11 GMT, Michael McMahon wrote:
> Hi,
>
> This change adds Channel Binding Token (CBT) support to HTTPS
> (java.net.HttpsURLConnection) when used with the Negotiate (SPNEGO, Kerberos)
> authentication scheme. When enabled, the implementation preemptively includes
> a
On Sat, 15 Jan 2022 00:49:05 GMT, Weijun Wang wrote:
>> Argh - you're right I missed the fact that the 3 expressions where included
>> in parenthesis. I read it as
>>
>> ! (s.equals("always")) || ...
>
> Shall we log a message if the value is not one of the 3 forms?
Usually malformed values a
On Mon, 17 Jan 2022 06:32:13 GMT, Prasadrao Koppula
wrote:
>> This system property should only be used for TLS, and the CBT can be used in
>> both the SPNEGO mechanism and the Kerberos 5 mechanism. Therefore I suggest
>> the name should probably contain "tls" (or maybe "https") and "negotiate"