3 ms·
> I believe Bouncycastle supports it, but am not sure. Yeah I know Jetty, Tomcat and Undertow all support it. But they are either terrible hacks or bypass Java
by needusername 10y ago
> I believe Bouncycastle supports it, but am not sure.
Yeah I know Jetty, Tomcat and Undertow all support it. But they are either terrible hacks or bypass Java crypto entirely.
See
https://www.youtube.com/watch?v=1I2Uo_HfmGU https://www.youtube.com/watch?v=1I2Uo_HfmGU
> Java crypto has lagged for years for the residual effects of legal restrictions.
Nope, long keys were (and still are) are disabled per default. It is and always was just a config change. I agree with you that's is lagging a bit (e.g. TLS 1.3 will likely have to wait for Java 10 or later) but legal restrictions are not the cause.