[AURORA-620] Consider using JCenter over HTTPS instead of Maven Central

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Fix Version/s: 0.8.0
• Component/s: Build, Scheduler, Security
• Assignee: Kevin Sweeney
• Reporter: Kevin Sweeney
• Created: 29/Jul/14 19:13
• Updated: 04/May/15 14:28
• Resolved: 27/Sep/14 05:31

Description

Since there are tools in the wild to MITM Maven Central users, switch to JCenter over HTTPS.

See http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/ for context.

Issue Links

• relates to: AURORA-616 Consider using gradle-witness to verify dependencies