[ https://issues.apache.org/jira/browse/DRILL-7270?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Arina Ielchiieva updated DRILL-7270: ------------------------------------ Summary: Fix non-https dependency urls and add checksum checks (was: Fix non-https dependency urls) > Fix non-https dependency urls and add checksum checks > ----------------------------------------------------- > > Key: DRILL-7270 > URL: https://issues.apache.org/jira/browse/DRILL-7270 > Project: Apache Drill > Issue Type: Task > Affects Versions: 1.16.0 > Reporter: Arina Ielchiieva > Assignee: Dmytriy Grinchenko > Priority: Major > Fix For: 1.17.0 > > > Review any build scripts and configurations for insecure urls and make > appropriate fixes to use secure urls. > Projects like Lucene do checksum whitelists of all their build dependencies, > and you may wish to consider that as a > protection against threats beyond just MITM. -- This message was sent by Atlassian JIRA (v7.6.3#76005)