Uploaded image for project: 'Maven'
  1. Maven
  2. MNG-5679

Maven should fetch jars using https

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Won't Fix
    • None
    • None
    • None
    • None

    Description

      See the article "How to take over the computer of any Java (or Clojure or Scala) developer": http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/

      As a result of this article, Sonatype has moved their repository to https and Typesafe has as well. (Typesafe found their GoDaddy cert doesn't work with some version of Java and is aiming to fix this by Aug 24, 2014)

      When I download jars from Maven central using Maven, I'm using http. We really should make https the default here

      Attachments

        Activity

          People

            Unassigned Unassigned
            chengas123 Java Developer
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: