On Thu, 3 Nov 2022 14:59:59 GMT, Sean Mullan <mul...@openjdk.org> wrote:
> This change will disable TLS_ECDH_* cipher suites by default. These cipher > suites do not preserve forward secrecy and are rarely used in practice. See > the CSR for more details and rationale. > > Users will still be able to enable the suites (at their own risk) by removing > "ECDH" from the `jdk.tls.disabledAlgorithms` security property. Looks good to me. ------------- Marked as reviewed by xuelei (Reviewer). PR: https://git.openjdk.org/jdk/pull/10969
