[ 
https://issues.apache.org/jira/browse/DRILL-7270?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Arina Ielchiieva updated DRILL-7270:
------------------------------------
    Description: 
Review any build scripts and configurations for insecure urls and make 
appropriate fixes to use secure urls.

Projects like Lucene do checksum whitelists of all their build dependencies, 
and you may wish to consider that as a
protection against threats beyond just MITM.

  was:Review any build scripts and configurations for insecure urls and make 
appropriate fixes to use secure urls.


> Fix non-https dependency urls
> -----------------------------
>
>                 Key: DRILL-7270
>                 URL: https://issues.apache.org/jira/browse/DRILL-7270
>             Project: Apache Drill
>          Issue Type: Task
>    Affects Versions: 1.16.0
>            Reporter: Arina Ielchiieva
>            Assignee: Dmytriy Grinchenko
>            Priority: Major
>             Fix For: 1.17.0
>
>
> Review any build scripts and configurations for insecure urls and make 
> appropriate fixes to use secure urls.
> Projects like Lucene do checksum whitelists of all their build dependencies, 
> and you may wish to consider that as a
> protection against threats beyond just MITM.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to