November 2014 Summaries

Bintray Premium accounts offer features tailored for commercial software distribution, including private repositories, fine-grained permission management, and storage flexibility. A key feature for managing access to artifacts is the Signed URL, which allows users to share files from private repositories with anyone, even those without a Bintray account, through a unique URL. This URL can be configured to expire after a certain time or be revoked at any moment, ensuring controlled access. Creating a Signed URL involves using a REST API call, which utilizes a unique pair of internal private and public keys for encryption and decryption. By default, the signed URL is valid for 24 hours, but this duration can be adjusted through a JSON configuration. More information on this API can be found in the Bintray REST API documentation, highlighting the simplicity and control offered for distributing artifacts securely.

Bintray Premium offers enhanced features such as private repositories, permission management, and the ability to create signed, expirable URLs for accessing repository content. These signed URLs are unique, potentially limited in lifetime, and offer secure access to private artifacts by encrypting the URL with internal, private, and public keys associated with a user's Bintray account. This functionality allows both Bintray and non-Bintray users to download packages via one-time unique URLs, which can be revoked at any time. Users can customize the URL's expiry time using a simple JSON configuration, and the feature is designed to automate and simplify the distribution of secure download links.