JEP Review Request: Improve Security Manager Performance

2014-08-14 Thread Sean Mullan
Hello all, I have submitted a JEP for "Improve Security Manager Performance" that I am seeking further review and feedback: https://bugs.openjdk.java.net/browse/JDK-8043631 This is very similar to a draft I posted earlier [1], but has been re-drafted using the JEP 2.0 process. The JEP is i

Re: Review Request for 7026255 : Methods of Subject that throw SecurityException do not specify what permissions are required

2014-08-14 Thread Xuelei Fan
On 8/13/2014 10:24 PM, Sean Mullan wrote: >> 656 * is thrown if the caller does not have the proper permissions. >> Do we want to point out the actual modify permissions? > > This is pointed out in the following paragraph: > > * While iterating through the {@code Set}, > * a {@cod

Re: Trusted service?

2014-08-14 Thread Wang Weijun
On Aug 14, 2014, at 16:03, Alan Bateman wrote: > >> Or writing the class name in a services file automatically exports it as a >> service? >> >> Now my preferred order will be >> >>if (loadProviderFromProperty()) >>return provider; >>if (loadProviderAsInstalledService()) >>

Re: Trusted service?

2014-08-14 Thread Alan Bateman
On 14/08/2014 01:34, Wang Weijun wrote: Yes, I see a lot of places using if (loadProviderFromProperty()) return provider; if (loadProviderAsService()) return provider; The 1st using Class.forName() and 2nd ServiceLoader.load(). I was thinking that the 1st method will no

Re: Trusted service?

2014-08-14 Thread Wang Weijun
On Aug 13, 2014, at 22:11, Bernd Eckenfels wrote: > Just a BTW: It would be really cool to have a SPI interface for that, so > people who need SRP, CCM or shared secret handshakes (or stuff like NPN?) > don't need to use a third party SSL engine. Are they all ciphersuites not based on certifi