Send a reminder email to listing owners about deprecation of http URLs for listings
Is it possible to send this one to list owner with references to plain http sites only?
Thanks!
Dear Eclipse Marketplace Listing Owner,
TL;DR, Reminder if you have a listing on the marketplace using plain
http
, go update it as soon as possible tohttps
as this will be enforced soon. Details below.As stewards of the Eclipse Marketplace, the Eclipse Foundation is responsible for providing a safe place for the Eclipse IDE users to download their plugins. While the Eclipse Marketplace does not host or transmit the plugins bits, it provides links to (p2) repositories containing them. Until today, there was no restriction on those links.
Beginning December 15, 2022, the Eclipse Marketplace will no longer support links to repositories over plain HTTP. The goal is to protect users of the Eclipse Marketplace from the main risk of plain HTTP links: man-in-the-middle (MITM) attacks.
We will roll out this new requirement in 4 steps:
- Since September 20, 2022, a banner is displayed on the Eclipse Marketplace website homepage to spread awareness of the upcoming changes.
- Since October 20, 2022, the banner is displayed on all Eclipse Marketplace pages and new validation rules will be added to the Eclipse Marketplace backend. New solutions will not be allowed to use links to repositories over plain HTTP and existing solutions will not be able to edited if they still link content over plain HTTP.
- On December 15, 2022, all non-compliant solutions will be deactivated and won’t be displayed anymore on the Marketplace website. Owners will still be able to fix those for a limited period and get them re-instated.
- On January 30, 2023, all deactivated solutions that have not been fixed will be permanently deleted.
If you own a listing with plain
http
references to p2 repositories, we encourage you to update them as soon as possible withhttps
. You will get frequently reminders before termination, but the sooner you do it, the lesser emails you will get ! You can also listen to our public tracking issue to stay informed about these changes.Thanks!