The TLSv1.3 implementation is available in JDK 8u from 8u261 and enabled by default for server roles but disabled by default for client roles. New Feature: Enable TLSv1.3 by Default on JDK 8u for Client Roles.The server can then detect if the client has been fooled by a MITM and shutdown the session/connection.See JDK-8279842 They work by communicating from a client to a server the client's understanding of the binding between connection security (as represented by a TLS server cert) and higher level authentication credentials (such as a username and password). Support has been added for TLS channel binding tokens for Negotiate/Kerberos authentication over HTTPS through .Ĭhannel binding tokens are increasingly required as an enhanced form of security. New Feature: HTTPS Channel Binding Support for Java GSS/Kerberos.» Java release dates Java 8 Update 341 (8u341) Release Highlightsįor more information, refer to Timezone Data Versions in the JRE Software.

More information about changes can be found in the release notes for each release.

This page highlights changes impacting end users for each Java release.

Java 64 bit