This document captures the links to all of the different artifact server hosts that have announced they will be formally depricating downloading dependencies over HTTP and will only be supporting HTTPS starting in January 2020.
Want to take over the Java ecosystem? All you need is a MITM!
Timeline:
- HTTP disabled January 15th, 2020
Announcement:
Timeline:
- October 1st, 2019: HTTP -> HTTPS redirect
- January 13st, 2020: HTTP disabled
Annoucement:
Timeline:
- January 15th, 2020: HTTP disabled
Annoucement:
Timeline:
- October 29th, 2019: HTTP to HTTPS redirect.
- November 14th, 2019: Disable HTTP for 24 hours and permanently drop support for TLSv1
- January 15th, 2020: HTTP requests to Gradle resources will be denied. Only HTTPS will be supported.
- February 15th, 2020: Enable HSTS for gradle.com and gradle.org. This change will only impact browsers.
Annoucement:
Plans: https://bugs.eclipse.org/bugs/show_bug.cgi?id=550999
Please star and subscribe to this gist for updates!