aurora-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jake Farrell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AURORA-620) Consider using JCenter over HTTPS instead of Maven Central
Date Wed, 30 Jul 2014 14:32:39 GMT

    [ https://issues.apache.org/jira/browse/AURORA-620?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14079319#comment-14079319
] 

Jake Farrell commented on AURORA-620:
-------------------------------------

Blog post from Sonatype on the issue [1], Maven central will be under ssl soon and will make
the switch to JCenter unnecessary 

[1]: http://blog.sonatype.com/2014/07/ssl_connectivity_for_central

> Consider using JCenter over HTTPS instead of Maven Central
> ----------------------------------------------------------
>
>                 Key: AURORA-620
>                 URL: https://issues.apache.org/jira/browse/AURORA-620
>             Project: Aurora
>          Issue Type: Task
>          Components: Build, Scheduler, Security
>            Reporter: Kevin Sweeney
>            Assignee: Kevin Sweeney
>
> Since there are tools in the wild to MITM Maven Central users, switch to JCenter over
HTTPS.
> See http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/
for context.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message