Java 17 to 21: A Showcase of JDK Security Enhancements

In the dynamic landscape of software development, security remains paramount. This session offers a comprehensive showcase of the security enhancements after JDK17. From the evolution of modern cryptographic algorithms to the intricacies of JDK security configuration, API advancements, and the game-changing role of Java Flight Recorder, this showcase will equip you with a comprehensive understanding of how the JDK's commitment to security has matured over time.
Join this talk to witness the evolution of security within the JDK, as we bridge the gap from Java 17 to today, and illuminate the path to a more secure future.
Presented by Ana-Maria Mihalceanu (Oracle)
Recorded at Jfokus 2024 ➱ www.jfokus.se
◦ JEP 411 about deprecation of the Security Manager for removal ➱ openjdk.org/jeps/411
◦ Sean Mullan's blog on JDK security changes ➱ seanjmullan.org/blog/
◦ Java Security Standard Algorithm Names ➱ docs.oracle.com/en/java/javas...
◦ Java Security Guide ➱ docs.oracle.com/en/java/javas...
◦ Java CryptoRoadmap ➱ www.java.com/en/jre-jdk-crypt...
◦ Java 21 Tool Enhancements: Better Across the Board ➱ • Java 21 Tool Enhanceme...
◦ Java 21 Security Updates ➱ • Java 21 Security Updat...
◦ More on Security ➱ inside.java/tag/security
Tags: #Java #JDK #Security #OpenJDK

[@kevinnguyen163]

Thanks Ana. Security in the JDK is not something that I often use (code) in my daily job but it's good to know the improvement Java team has made to make our platform secure.

[@RaushanKumar-dx7ns]

Java is love , java security is unbelievable

[@erano01]

I love new java features!

[@ansarozden5767]

Thanks for sharing video!

[@lalwans]

Algorym

[@TwstedTV]

I stopped using Java a few years ago because I got tired of its syntax. having to type very long statements JUST to print something is very annoying as an example out of many other things.
such as the most annoying ( System out println ) instead of just something simple like ( print ) or even more simpler like ( pr ) such as an example,
pr("Hello World").
Its the main reason why I decided to drop Java and just go with python. python is now my main language I use at work, as I left my previous java job a few years ago.

[@cosmowanda6460]

I'm assuming you'll never use c++? Or rust? Or go? Because those languages gets verbose the moment your project starts getting big.

[@TwstedTV]

@@cosmowanda6460
Yup that's correct. Just because the language is out there doesn't mean I have to use it.
That's why I stopped using C++ also.
I got heavenly into C# and C++ to do games, and way too much stuff was annoying me over time, so I stopped using it and dropped the whole idea and language. Then I moves to Java to make mods for minecraft and also learn about backend and that annoyed me to no end for the same reasons of verbose language having to type so much stuff just to do simple things. So I stopped using it.
And I don't touch go because I never needed to.
I'll stay with python for now thanks 🥰👍

[@greatso9018]

@@TwstedTV I don't think you really used Java professionally.
If you did, you would never have used System.out.println but a logger, or you would have discovered that you can type "sysout" and that your ide autocompletes it

[@TwstedTV]

@@greatso9018
No I don't use java "professionally" as you put it, because I stopped using it before I got into the profession. So there is that.
And also I used it as 1 example out of thousands I found about java.
I get it bruh, people are hardcore about java.
And that's ok. 🤓👍good for them. But I am just explaining why I myself don't like it. Its my opinion, and I believe I am completely entitled to an opinion. Also I am not the only one with this exact opinion. So its not like I am the lone-rider on this. People are gravitating mostly towards python, because its not so cumbersome with unnecessary syntax. Oracle even went as far as eliminating the main entry point in main and strings-args in the very beginning. Its a start but they need to do a lot more. Just saying. 🤷‍♀

[@greatso9018]

@TwstedTV It's not about being "hardcore" about Java. But you're writing as if you had to chose a team. Idk who you are referring to when you say that "people are gravitating toward python". But r/ProgrammerHumor isn't the real world. You need to understand that most people don't care about this debate, and are just excited about every new breakthrough in IT.
And then you're comparing two languages that have pretty much nothing in common. Python is interpreted, dynamically and weakly typed, Java is different in every point. They are not meant for the same thing. I used python a lot, for web, AI, scripting, CLI tools. But I would just not use it for the same type / scale of project.
Idk if there is any type/memory safe language that is substantially less verbose than Java tbh. Saying "Java is too verbose" is not something that will make you step up as a developer. On the other end, Java is used a lot by enterprises. And enterprise coding style is VERY tideous and very verbose. But is it really Java ? I don't think so