Inside Java
News and views from members of the Java team at Oracle
Sort by: Date | Author | Tag
JDK 28
JDK 27
JDK 26
JDK 25
JDK 24
JDK 23
JDK 22
JDK 21
JDK 20
JDK 19
JDK 18
JDK 17
JDK 16
JDK 15
JDK 14
JDK 13
JDK 12
Artificial Intelligence
Client
Cloud
Community
Concurrency
Core Libraries
Education
Garbage Collectors
HotSpot
Integrity by Default
JDK Flight Recorder
Java Language
Modules
Moved By Java
Networking
Oracle
Performance
Project Amber
Project Babylon
Project Leyden
Project Loom
Project Panama
Project Valhalla
Security
Serviceability
Security
2026
- JEP targeted to JDK 28: 542: PEM Encodings of Cryptographic Objects
- Faster Post-Quantum Cryptography with JDK Intrinsics
- Episode 71 “Security in Java” [AtA]
- JDK 27 Security Enhancements
- Acceleration of Curve25519 Field Operations with Java Software and Intrinsics
- Announcing Oracle Jipher 10.37: FIPS 140-3 Cryptography for Java
- Quality Outreach Heads-up - JDK 28: Named Group Information Captured in the TLSHandshake JFR Event
- Episode 66 “JSON API, Valhalla Progress, LTS ❤️ PQC” [IJN]
- Post-Quantum Cryptography in Long-Term Support JDK Releases
- Transitioning Java to More Frequent Security Updates
- Quality Outreach Heads-up - JDK 28: jlink cacerts plugin
- JEP targeted to JDK 27: 538: PEM Encodings of Cryptographic Objects (3rd Preview)
- Episode 58 “Java Gets Post-Quantum TLS” [IJN]
- Quality Outreach Heads-up - JDK 27: Post-Quantum Hybrid Key Exchange for TLS 1.3
-
Java and Post-Quantum Cryptography
- JDK 26 Security Enhancements
- Secure, Scalable JVM Diagnostics for Kubernetes with JMS
- Post-Quantum Hybrid Key Exchange for TLS 1.3
- JEP targeted to JDK 27: 527: Post-Quantum Hybrid Key Exchange for TLS 1.3
2025
- Quality Outreach Heads-up - JDK 26: HttpClient Supports TLS Named Groups & Signature Schemes
- JEP targeted to JDK 26: 524: PEM Encodings of Cryptographic Objects (Second Preview)
-
Reviewing the JDK 25 Release Notes - Inside Java Newscast #98
- JDK 25 Security Enhancements
-
How to Handle Security Changes in Java 25 #RoadTo25
- Episode 39 “Deprecations & Removals” [AtA]
-
Java Security Evolution - Out with the Old, In with the New
-
Java 25 Encodes PEM - Inside Java Newscast #93
- JEP targeted to JDK 25: 470: PEM Encodings of Cryptographic Objects (Preview)
- JEP targeted to JDK 25: 510: Key Derivation Function API
- Announcing Jipher: Java Cryptographic Service Provider for FIPS Environments
- JDK 24 Security Enhancements
-
Java 24 Release Notes Overview - Security Updates
-
Java Resists Quantum Attacks - Inside Java Newscast #85
2024
- Detoxifying the JDK Source Code
- Quality Outreach Heads-up - JDK 24: Retiring the Security Manager
- Quality Outreach Heads-up - JDK 24: Security Properties Files Inclusion
- JEP targeted to JDK 24: 497: Quantum-Resistant Module-Lattice-Based Digital Signature Algorithm
- JEP targeted to JDK 24: 496: Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism
-
Monitoring Java Application Security with JDK tools and JFR Events
- JEP targeted to JDK 24: 486: Permanently Disable the Security Manager
- JEP targeted to JDK 24: 478: Key Derivation Function API (Preview)
-
Serialization - A New Hope
- JDK 23 Security Enhancements
- Tutorial: Leveraging JDK Tools and Updates to Help Safeguard Java Applications
- Quality Outreach Heads-up - JDK 23: Re-Specified Subject.getSubject API
-
How to Build Custom Java Runtimes with Jlink
- JDK 22 Security Enhancements
-
Java 17 to 21: A Showcase of JDK Security Enhancements
-
Java's Custom Runtime Builder - jlink - Stack Walker #5
2023
- Java SE Security Developer’s Guide
- Open sourcing Jipher for FIPS regulated environments
- JDK 21 Security Enhancements
-
Java 21 Security #RoadTo21
-
Strengthen your Java App's Defenses with Key Encapsulation Mechanism API - Inside Java Newscast #54
- KDF JEP for the Java Platform
- JEP proposed to target JDK 21: 452: Key Encapsulation Mechanism API
-
Evolving the Security of the Java Platform
- JDK 20 Security Enhancements
- Tutorial - Introduction to Java Encryption/Decryption
- Quality Outreach Heads-up - JDK 20: JMX Connections Use an ObjectInputFilter by Default
-
From Java Security with Love - Inside Java Newscast #42
-
Future Java - Prepare Your Codebase Now! - Inside Java Newscast #41
-
Secure Coding Guidelines for Java SE
2022
- JDK 19 Security Enhancements
- Why Write an Empty finalize() Method?
- Quality Outreach Heads-up - Java Cryptographic Extension Survey
- Oracle JRE and JDK Cryptographic Roadmap Update
- Java Cryptographic Extension Survey
- JDK 18 Security Enhancements
- Episode 21 “JEP 421 and Finalization Deprecation” [AtA]
2021
- Quality Outreach Heads-up - JDK 18: JEP 411
- Record Serialization - Sip of Java
- JDK 18 augmented `javac -Xlint:serial` checks
- Oracle JRE and JDK Cryptographic Roadmap update
- Serialization Filters - Sip of Java
- JDK 17 Security Enhancements
- A few updates to JEP 411: Deprecate the Security Manager for Removal
- Episode 18 “Java's steady march towards strong encapsulation” [AtA]
- Oracle JRE and JDK Cryptographic Roadmap
- JEP proposed to target JDK 17: 415: Context-Specific Deserialization Filters
- Updates to JEP 411: Deprecate the Security Manager for Removal
-
Inside Java Newscast #5
- JEP proposed to target JDK 17: 411: Deprecate the Security Manager for Removal
- Updates to JEP 411: Deprecate the Security Manager for Removal
- New candidate JEP: 415: Context-Specific Deserialization Filters
- Security and Sandboxing Post SecurityManager
- New candidate JEP: 411: Deprecate the Security Manager for Removal
-
How Java Records Can Improve Serialization
- Record Serialization in Practice
- JDK 16 Security Enhancements
- JEP proposed to target JDK 17: 398: Deprecate the Applet API for Removal
- Simpler Serialization with Records
- Episode 14 “Records Serialization” [AtA]
- New candidate JEP: 398: Deprecate the Applet API for Removal
- Monitoring Deserialization to Improve Application Security
- Reducing MD5 (and SHA) overheads
- JEP proposed to target JDK 17: 356: Enhanced Pseudo-Random Number Generators
- Investigating MD5 overheads
2020
- Oracle JRE and JDK Cryptographic Roadmap
- Oracle JRE and JDK Cryptographic Roadmap
- JDK 15 Security Enhancements
- Oracle JRE and JDK Cryptographic Roadmap
-
Keeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
- SHA-3 based digital signatures support
- Record Serialization
- JDK 14 Security Enhancements
2019
-
Why We Hate Java Serialization
-
What’s New in Java Security?
- JDK 13 Security Enhancements
- JDK 12 Security Enhancements
- Oracle's Plan for Distrusting Symantec TLS Certificates in the JDK
2015
