Hi Kenneth,

I don't think there's any security related problem here. The Apache Mirror System, for instance, uses "http" frequently. IMHO there's no need to encrypt files that are publicly available for everyone to see.

Security is on the IDE side: verifying that the downloaded file has not been modified while on transit, either by using a PGP signature or other digesting techniques, as the ASF guidelines mandate.

Cheers,
Antonio

El 25/09/2018 a las 18:55, Kenneth Jaeger escribió:
The plugins.netbeans.org does not use https by default, nor does it allow
https.  An error occurs if you try to change it to https.

The updates.netbeans.org site does allow the use of https, but does not
redirect to https if http is used.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists



Reply via email to