Joe Kuhel

Senior Software Engineer @ HeroDevs, Inc. | Expert in security in the Java ecosystem and cloud technologies. Passionate about Spring, open source, and the technologies that power modern software.

Towards an understanding of sustainable software development, written by and for the friends of OpenJDK

Modernizing Java with Jakarta EE 11

Learn how to get your Java applications to cloud-native, AI-ready infrastructure without a costly rewrite or vendor lock-in.

Cut Code Review Time & Bugs in Half. Instantly.

Supercharge your team to ship faster with the most advanced AI code reviews.

Likes 3

Comments 0

Shares 0

Articles 1

Views 3,3K

Cipher Downgrade: How a Tomcat Update Could Weaken Your TLS Configuration

Table of Contents What's the risk?Who is AffectedThe FixHow to VerifyRecommendationA recent update to Apache Tomcat introduced a subtle but significant change to how TLS cipher suites are configured. If your Spring Boot application explicitly configures TLS ciphers, particularly TLSv1.3 ...