What people are really saying here is that the native APIs provided the standard Java packages are behind. Java, as a platform, has no inherent limitations lik

What people are really saying here is that the native APIs provided the standard Java packages are behind. Java, as a platform, has no inherent limitations like this. Feel free to check out the excellent work of the team a Bouncy Castle [1]. They offer full ECDHE support in a really well maintained library. Sure, Oracle should build this in natively (and I admit that it does look bad when you see it on SSL Labs), but there are other options. [1] https://www.bouncycastle.org https://www.bouncycastle.org