News for hackers. Stuff that matters.
Re:Logjam TLS attack by samch on Wednesday May 20, 2015 @04:22PM (#9579023)
What people are really saying here is that the native APIs provided the standard Java packages are behind. Java, as a platform, has no inherent limitations like this. Feel free to check out the excellent work of the team a Bouncy Castle [1]. They offer full ECDHE support in a really well maintained library. Sure, Oracle should build this in natively (and I admit that it does look bad when you see it on SSL Labs), but there are other options.

[1] https://www.bouncycastle.org

There are no comments on this comment yet.