The next version of standard Java, due in mid-March, will have Transport Level Security (TLS) 1.2 set by default, thus providing encrypted Internet communications. But the move is not a solution for Java's ongoing security woes.
TLS 1.2 will be enabled in Java Development Kit (JDK) 8, set to ship March 18. Version 1.2 strengthens the protection of Internet communications against eavesdropping and is backward-compatible with versions 1.1 and 1.0, the Java Platform Group said in a blog post this week. "TLS is designed to encrypt conversations between two parties and ensure that others can neither read nor modify the conversation. When combined with certificate authorities, a proper level of trust is established: we know who is on the other end of the conversation and that conversation is protected from eavesdropping/modification."