On Sat, 24 Oct 2026 17:42:36 GMT, Brent Christian <[email protected]> wrote:
>> This brings in change for 8395690: CA certificate improvements >> >> >> >> >> --------- >> - [x] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > Brent Christian has updated the pull request with a new target base due to a > merge or a rebase. The incremental webrev excludes the unrelated changes > brought in by the merge/rebase. That perhaps explains why the G3 roots have been deleted, if Java can't effectively block compromised intermediates. I still don't see a reason why G1 was deleted, out of line with Chrome, Mozilla, and others. I've been told there are discussions between Certinext and Oracle about the implications of this, and why it needs to be reversed. If anyone from Oracle feels it'd be helpful to move this to a support ticket, please let me know. ------------- PR Comment: https://git.openjdk.org/jdk/pull/33554#issuecomment-6415441048
