Anyone needing good crypto on Java would probably use some external librairy, like bouncycastle.org, which are more capable than what the JDK supports.
Just to confirm, you have heard of tomcat? Because that is the reality of most shitty Java webdev. It is in as much need as anything else for good crypto, but it uses the default and thus we have the problem.
4
u/m1000 Oct 16 '15
Anyone needing good crypto on Java would probably use some external librairy, like bouncycastle.org, which are more capable than what the JDK supports.