Securing Sensitive Data in Java Applications with JEP 411 (Foreign Function & Memory API)

Avoiding Leaks When Handling Native Memory and Secrets. Handling sensitive data has always been a delicate challenge in Java. Traditionally, you store them in Java heap memory as String or char. But this leaves secrets vulnerable: They can be inadvertently serialized or logged.