Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [rest-dev] [External] : Deprecating the ClientBuilder.hostnameVerifier
  • From: Santiago Pericasgeertsen <santiago.pericasgeertsen@xxxxxxxxxx>
  • Date: Fri, 14 Jul 2023 13:10:38 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oracle.com; dmarc=pass action=none header.from=oracle.com; dkim=pass header.d=oracle.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=c39X8ZTzUMHdmf7Q5xw5kQkgzWejjUqPPuIZDp3FaGQ=; b=JhKHJXu0LYDc/6tPsmizRhEcbQSQlwkEds02ApDaVNspFmJJDythBVYqSSTeg390qG+QqdW84kkk5AN5y7mfvtTYnWUJUsvQAWLenm32ijb4mfEH3oAdRsMCV6IIqN09O88BWIQF6dfc4cpufhJYPPEchFlK1BctvjbSXvVSN3r83ubYJ+TxDX3MmsoL3I4WQGBmhSyxXGp3LZWnsQTrU8bu4ge/F9VJfpFlmvkh7kGjXadKUXjRs0IrvK/dtE0/Y3T/gF4RoQiM0H8on2NTAZ3MQfuk2wufO33mSCkmD8CvV1N2Ny7k9ETtlPL/Co33Gu/nHN2LNDHsVQj7N+OR0g==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mzp58CYNF//DPwchtQdkBzf8A9zWrx9bNVuLXMuMu49E/FHVDdabYgvfUgbuBkucYPHNSfstbVJJAtrze1a9LGjBYvLCMRxvUqk0A1TdPTgYDAzQqwsJtL3HeS9FYSeYLse809exDTPMbXwmkOLi8N6c1pFn2n6qMtiB0Ux4+JIJqGaTcKBqRIpv7VL3geE8bq7uXDKWHtpD1YOWK/THPBmS6EwyU4EirQ3QRrXDSfj3qSbO/KO8fTTMbyz7SKNlTHl8VhSNZ+IRf0w4I4ewxMWOYXSrAbpKcneQ70DVSoLbDadvobbxmnBXIs6rpJTGIJ+BlhegNb3DiQkHThCm2Q==
  • Delivered-to: rest-dev@xxxxxxxxxxx
  • List-archive: <https://www.eclipse.org/mailman/private/rest-dev/>
  • List-help: <mailto:rest-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/rest-dev>, <mailto:rest-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/rest-dev>, <mailto:rest-dev-request@eclipse.org?subject=unsubscribe>
  • Thread-index: AQHZtBCekY2n1ZMR9UiQu80RIMKPaq+5QP0A
  • Thread-topic: [External] : [rest-dev] Deprecating the ClientBuilder.hostnameVerifier
James,

 I don’t recall if we discussed this before. Let’s create an issue for 4.0.

— Santiago

On Jul 11, 2023, at 11:58 AM, James Perkins via rest-dev <rest-dev@xxxxxxxxxxx> wrote:

Hello All,
Has it ever been considered to deprecate the ClientBuilder.hostnameVerifier [1]? I ask because the JDK HttpClient does not support setting it [2] requiring the usage of an external HTTP client for REST client implementations.

The JDK HttpClient does allow this to be disabled, but it's a global setting which doesn't work well for the ClientBuilder. It could also be overridden with some custom HostnameVerifier, however that seems it could lead to security risks.

My assumption is this override was added for testing or internal use cases. It seems like something that could be worked around in different ways or a safer manner.

Anyway, I just thought I would bring this up to get some opinions or clarification on why it was added.

--
James R. Perkins
JBoss by Red Hat
_______________________________________________
rest-dev mailing list
rest-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://urldefense.com/v3/__https://accounts.eclipse.org__;!!ACWV5N9M2RV99hQ!NPctKDhgNwdRXI-DBtKvCRtAlbjBepV2pjzNLF212p-XONtJUOBco1Melx4_lM5SzYFa_S7sSQM2BFmkGmwqu85W5mGf$

Back to the top