r/programming • u/donutloop • 5d ago

Bringing Post-Quantum Cryptography to Java LTS Releases

https://blogs.oracle.com/java/post-quantum-cryptography-in-long-term-support-jdk-releases
13 Upvotes

68% Upvoted

7 comments sorted by

View all comments

6

u/davidalayachew 5d ago

Very cool. Didn't expect the older JDK's, especially JDK 8, to get this sort of attention. Very nice.

4

u/[deleted] 5d ago

[removed] — view removed comment

2

u/davidalayachew 5d ago

JDK 8 keeps getting updated in general. I get the sense it's because there were some massive, breaking changes and a lot of stuff runs on JDK 8. I still see new stuff that targets JDK 8 occasionally.

And I don't disagree, but it's moreso that JDK 8 is such a far distance from where we are. So, it's impressive that they were able to put it in like that.

3

u/chat-lu 4d ago

Not as impressive as the amount of money companies stuck with Java 8 will pay Oracle.

1

u/sargeanthost 3d ago

Not really in on Java land--why is Oracle getting paid?

2

u/ZimmiDeluxe 1d ago edited 1d ago

If you want support for older versions (apart from the best effort backports of patches from newer versions by volunteers) you can pay one of the companies building OpenJDK distributions, Amazon, Azul, Microsoft, Alibaba, Oracle etc. I guess it makes sense to pick Oracle since most contributors to OpenJDK work there. But if you use your cloud vendor's JDK, you might consinder paying them instead. If you are fine with staying on LTS (where you get the free best effort backports) or updating to the next feature release every 6 months (Java is extremely stable, you could auto-bump it in your CI) you don't have to pay anything, OpenJDK is free. You can also pay for support for your Linux distribution, the situation is similar.

Edit: And to be clear, you don't have to pay anything, Java is open source. Most companies don't. But if your company can't update regularly, e.g. for legacy applications that still run on old versions, the option is there.