After JDK-8037795 baseline, dynamic blacklist and blacklisted certs info is packed inside signed jar. Need to ensure that security team and Release Engineering could create and post it with each release (and possibly between releases when new blacklist entries are needed).
|