Le 16/06/2016 à 11:52, Rémy Maucherat a écrit : > Tomcat's > strategy avoids any risk to delay user requests, so is not effectively > worse than the other strategy.
Maybe the SecureRandom instance could be initialized asynchronously and delivered through a java.util.concurrent.Future? This way it doesn't block the startup, and it's likely to be fully initialized when the first requests arrive if we consider that the startup helps generating more entropy. Emmanuel Bourg --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
