Hacker News Reader

It's not clear if the JRE6 and the JRE7 are impacted (does the JSSE shipped with them support TLS1.2)? If so, pretty worrying as not supported anymore yet widely deployed.

View on HN

I keep seeing this in a lot of places, but Oracle are still releasing JDK6 and JDK7 updates every quarter. AFAIK TLSv1.2 is not supported on 6.

Edit: ah, but only to customers paying for support.

Java7u79 is supposed to be the last public release. From the SLOTH page, it looks like there might be another release to address this.

OpenJDK7 (not sure about 6) is still getting updates. I think Redhat is sponsoring that.

Reply on news.ycombinator.com