This change will disable TLS_ECDH_* cipher suites by default. These cipher suites do not preserve forward secrecy and are rarely used in practice. See the CSR for more details and rationale.
Users will still be able to enable the suites (at their own risk) by removing "ECDH" from the `jdk.tls.disabledAlgorithms` security property. ------------- Commit messages: - Initial revision. Changes: https://git.openjdk.org/jdk/pull/10969/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=10969&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8279164 Stats: 92 lines in 4 files changed: 14 ins; 63 del; 15 mod Patch: https://git.openjdk.org/jdk/pull/10969.diff Fetch: git fetch https://git.openjdk.org/jdk pull/10969/head:pull/10969 PR: https://git.openjdk.org/jdk/pull/10969
