[
https://issues.apache.org/jira/browse/AURORA-620?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14078865#comment-14078865
]
Bill Farner commented on AURORA-620:
------------------------------------
{quote}
They are working on a blog post in response to this issue and from what I
understand will be addressing all concerns.
{quote}
I'll have my popcorn ready :-)
> Consider using JCenter over HTTPS instead of Maven Central
> ----------------------------------------------------------
>
> Key: AURORA-620
> URL: https://issues.apache.org/jira/browse/AURORA-620
> Project: Aurora
> Issue Type: Task
> Components: Build, Scheduler, Security
> Reporter: Kevin Sweeney
> Assignee: Kevin Sweeney
>
> Since there are tools in the wild to MITM Maven Central users, switch to
> JCenter over HTTPS.
> See
> http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/
> for context.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
