JEP 403 (openjdk.java.net/jeps/403) will finally finish the trek towards strong encapsulation by only allowing access to internal APIs that were explicitly broken into with --add-export/--add-opens. No more blanket --illegal-access! So... what exactly are internal APIs? 🧵 1/9

We need to look at the following packages: 1. sun.* 2. com.sun.* First is easy (almost): All sun.* packages are internal *except* for sun.misc, which is exported/opened by the module jdk.unsupported. That gives it a grace period until fully replaced by standard APIs. 2/9

@nipafx My understanding is, that #JEP 403 not only affects com.sun.* and sun.*, but also exported packages like java.*/javax.* in that deep reflective access to internal elements (like private fields and methods) isn't possible by default anymore, too. Is that correct?