Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in
  • P public-tasks
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 1
    • Issues 1
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
  • Wiki
    • Wiki
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • Eclipse FoundationEclipse Foundation
  • SecuritySecurity
  • public-tasks
  • Issues
  • #1
Closed
Open
Issue created May 31, 2022 by Mikaël Barbero@mbarbero🗡Owner8 of 11 checklist items completed8/11 checklist items

Enforce https one marketplace.eclipse.org

In an effort to protect the Eclipse Marketplace users, we will enforce HTTPS for all solutions in a 4 steps process:

  • On September 20th; we will display a banner on the marketplace website to start notifying people about this process. No change and no breakage at this point. Mikael will publish a blog post at the same time to elaborate on the reasoning and value.
  • On October 14th October 20th; validation rules will be added to the marketplace website: solutions cannot be added or edited with plain http links; only https will be accepted.
  • On December 15th, we will un-publish all solutions having plain http links. We will reach out to owners one last about the unpublishing of their solutions, giving them 45 days (until January 30th) to fix them. After this date, solutions that don't match the new requirements will be permanently removed.
  • On January 30th, we delete all non compliances solutions.

Here is the communication plan with plain HTTP solutions owners:

  • Oct 4: first announcement to solutions owners, asking them to update their listings.
  • Oct 14 Oct 20: reminder + notification of the new validation rule
  • Nov 15: reminder about unpublishing in 1 month
  • Dec 5: reminder about unpublishing in 10 days
  • Dec 15: notification about unpublishing + reminder about deletion EOF January
  • Jan 17: last reminder about deletion in 2 weeks
  • Jan 31: notification about deletion
Edited Jan 11, 2023 by Mikaël Barbero
Assignee
Assign to
Time tracking

Copyright © Eclipse Foundation, Inc. All Rights Reserved.     Privacy Policy | Terms of Use | Copyright Agent