4 ms·
Interesting, this is the first time I've heard compliance as a reason -- can you elaborate? Is Oracle Java somehow FIPS or ISO certified but not OpenJDK? Thx.
by lsllc 4y ago
Interesting, this is the first time I've heard compliance as a reason -- can you elaborate? Is Oracle Java somehow FIPS or ISO certified but not OpenJDK? Thx.
- everforward 4y agoWhen I worked in finance, compliance (the team, not the concept) strongly preferred us to use vendor-supported tech. The understanding I got was that using vendor-supported software would indemnify us if a bug in that software caused us to violate some regulation. Basically, violations caused by software could be passed off to the maintainer of that software, but for open source stuff we were considered the maintainer. It was generally worth it to them to pay for stuff to avoid the tail risk of upsetting the SEC.