Next year, the Java browser plug-in, which is frequently the target of Web-based exploits, will be retired by Oracle.