Harvest-now, decrypt-later has stopped being a theoretical concern, and for anyone running Java services that carry long-lived sensitive data, this is the part of JDK 27 worth planning around now.
Simon Ritter, Deputy CTO at Azul, covers what the hybrid handshake actually does, how it behaves against endpoints that do not support it, what it costs in handshake size and latency, and how to start testing your TLS stack before procurement starts asking.
The rest of the release gets a shorter treatment: compact object headers on by default (JEP 534), G1 as the default collector in every environment (JEP 523), JFR in-process data redaction (JEP 536), and where the preview track has reached – including a straight answer to the question every release raises, which is how much performance a JDK upgrade on its own is really worth.
45 minutes, including Q&A.
