Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?

Artifact Server Annoucements

This document captures the links to all of the different artifact server hosts that have announced they will be formally depricating downloading dependencies over HTTP and will only be supporting HTTPS starting in January 2020.

mitm_build

Want to take over the Java ecosystem? All you need is a MITM!

Maven Sonatype

Timeline:

  • HTTP disabled January 15th, 2020

Announcement:

JFrog JCenter

Timeline:

  • October 1st, 2019: HTTP -> HTTPS redirect
  • January 13st, 2020: HTTP disabled

Annoucement:

Pivotal/Spring

Timeline:

  • January 15th, 2020: HTTP disabled

Annoucement:

Gradle

Timeline:

  • October 29th, 2019: HTTP to HTTPS redirect.
  • November 14th, 2019: Disable HTTP for 24 hours and permanently drop support for TLSv1
  • January 15th, 2020: HTTP requests to Gradle resources will be denied. Only HTTPS will be supported.
  • February 15th, 2020: Enable HSTS for gradle.com and gradle.org. This change will only impact browsers.

Annoucement:

Eclipse Foundation

Plans: https://bugs.eclipse.org/bugs/show_bug.cgi?id=550999


Please star and subscribe to this gist for updates!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.