[CONNECTORS-1095] Download artifacts over HTTPS

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: Manifold 1.7.1
• Fix Version/s: ManifoldCF 1.8, ManifoldCF 2.0
• Component/s: Build
• Labels: security
• Assignee: Karl Wright
• Reporter: Aeham Abushwashi
• Created: 05/Nov/14 17:48
• Updated: 06/Nov/14 00:18
• Resolved: 06/Nov/14 00:18

Description

In the interest of securing the download of maven artifacts, it would be good to use HTTPS instead of HTTP in the ant build scripts.
This by no means guarantees complete security for the build process and its output but helps protect against a certain class of Man In The Middle attacks. See the following thread for more information - http://stackoverflow.com/questions/7094035/how-secure-is-using-maven.

A patch will follow shortly...