Add a banner on the marketplace website to advertize the https enforcement

SSIA.

I'll provide the text for the banner along with a link to a blog post for details shortly.

mentioned in issue #86 (closed)

marked this issue as related to #86 (closed)

Here is the banner content:

In an effort to protect the Eclipse Marketplace users, we will begin to enforce the use of HTTPS for all consumers of content from the Eclipse Marketplace on <DATE TBD>. The Eclipse Marketplace does not host the content of the provided solutions, it only provides links to them. We are already requiring solutions owners to use HTTPS URLs for all new entries. We are actively working with owners of existing solutions with plain HTTP entries to update their listing. Beginning <DATE TBD>, non-compliant solutions will be unpublished from the Eclipse Marketplace until full resolution. You can read a full write up for more details.

added prioritymedium severitymajor team:security labels

@cguindon is it something doable in early Q4?

@cguindon is it something doable in early Q4?

This is doable right now. I actually already added the block but it's currently only visible to users with moderator role.

I just granted you that role. You should be able to see if if you login:

I will assign this to @epoirier so that he can finalize this task with you whenever you are ready to provide a link to your write up + date.

assigned to @epoirier

added team:webdev label

added stateblock label

Note that the block is currently configured to only show on frontpage. We can change that if you wish.

I guess that we could start with the front page only. Thanks!

mentioned in issue eclipsefdn/security/public-tasks#1 (closed)

Can we edit the block a little bit a push it to production?

In an effort to better protect the Eclipse Marketplace users, we will begin to enforce the use of HTTPS for all contents linked by the Eclipse Marketplace on October 14th, 2022. The Eclipse Marketplace does not host the content of the provided solutions, it only provides links to them. We are actively working with owners of existing solutions with plain HTTP entries to fix them. Beginning December 15th, non-compliant solutions will be unpublished from the Eclipse Marketplace. You can follow this effort on the tracking issue for more details.

@mbarbero I updated the message on marketplace.eclipse.org and the block is now visible by everyone.

Let me know if there's anything else.

keeping this one open as I think that on Oct. 14th, it will be great to display it on all pages to raise awareness

changed due date to October 14, 2022

removed the relation with #86 (closed)

The block is now showing up on all pages.

Let me know if there's anything else.

closed