JDK 28: Named Group Information Captured in the TLSHandshake JFR Event

Starting with JDK 28, the jdk.TLSHandshake JFR event captures the named group information negotiated during TLS key exchange, such as X25519MLKEM768. This event is disabled by default and must be enabled via a JFR configuration file, jfr configure, or when launching the application. The new field lets developers inspect exactly which key-exchange group was used to establish a TLS connection's shared secret using the jfr print command.

Source: https://inside.java/2026/08/21/quality-heads-up. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.