Posted on January 28, 2017 by Simon SteedClock’s ticking for MD5-signed JAR files, says Oracle Oracle’s delay in dropping support for the hash seems strange, but it’s finally named the day