Company
Date Published
Author
Baruch Sadogursky
Word count
597
Language
English
Hacker News points
None

Summary

JCenter, a central repository on JFrog's Bintray platform for sharing JVM language packages, announced that starting January 2020, it will exclusively support HTTPS requests, phasing out HTTP due to security concerns. The transition began on October 1, 2019, with HTTP requests being redirected to HTTPS, but after January 13, 2020, HTTP requests will be denied entirely. This change is driven by the need to prevent vulnerabilities such as man-in-the-middle attacks, highlighting JFrog's commitment to content integrity. Users currently utilizing HTTP should update their URLs to HTTPS promptly to ensure uninterrupted builds, while those already using HTTPS need no further action. JCenter remains a popular Maven hub, hosting over 340,000 public packages, and continues to support secure distribution of Android libraries and Maven packages.