On Mon, 26 Oct 2026 09:50:22 GMT, otbutz <[email protected]> wrote: > https://www.sonatype.com/blog/the-limits-of-fingerprint-blocklists-a-reproducible-java-certificate-bypass
This blog entry describes that you need to add 48 hashes not just the 16 obvious ones? The JDK has added 48 hashes in the Thursday release (see BlockedCertsConverter.java in https://github.com/openjdk/jdk/commit/bf83d326d844f04f4f1643417147255be3b53f7b#diff-e1df7ebad16db6b2402b539940cf958961dca3431dccbe4b84abd71bfe45e161). ------------- PR Comment: https://git.openjdk.org/jdk/pull/33554#issuecomment-6413190350
