Metadata

ID: java-security/ssl-context

Language: Java

Severity: Notice

Category: Security

Description

Do not use "SSL" as it uses an old protocol. Use "TLS" instead.

Learn More

• Difference between SSL and TLS
• Weak SSL Context

Non-Compliant Code Examples

public class Foo {
    
    public static foobar() {
        SSLContext.getInstance("SSL");
    }
}
    

Compliant Code Examples

public class Foo {
    
    public static foobar() {
        SSLContext.getInstance("TLS");
    }
}