packages icon indicating copy to clipboard operation
packages copied to clipboard

Using http instead of https for downloads is vulnerable to man-in-the-middle attacks

Open jocrau opened this issue 8 years ago • 0 comments

This causes automatic build pipelines to stop with the warning "Tried to use insecure HTTP repository without TLS.".

http:// should be https:// on lines

https://github.com/cljsjs/packages/blob/e0e943e79f28c814c1715978fa1d085674e83a61/jquery_2/build.boot#L20

and

https://github.com/cljsjs/packages/blob/e0e943e79f28c814c1715978fa1d085674e83a61/jquery_2/build.boot#L22

This might also apply to other packages.

jocrau avatar Dec 13 '17 16:12 jocrau