seanjmullan, 1 month ago

The XML Signature secure validation mode has been enabled by default in Oracle's JDK 11.0.23 and 8u411 releases. The mode was already enabled by default in JDK 17 and later. This mode provides additional protection by disabling weak algorithms and other potentially unsafe constructs in XML Signatures.

See the Released Changes of the Java Crypto Roadmap (https://www.java.com/en/jre-jdk-cryptoroadmap.html) for more details.

#JDK #security #java