search

OntoUML / ontouml-vp-plugin

A plugin for Visual Paradigm to add support for OntoUML modeling and model intelligence services
Apache License 2.0
34 stars 15 forks source link

Unencrypted API connection - http not https #155

Open Laura-Ngo opened 4 months ago

Laura-Ngo commented 4 months ago

Would it be possible to use https://api.ontouml.org instead of http://api.ontouml.org?

I'm trying to get Visual Paradigm (enterprise edition) and this plugin installed at my workplace but have fallen foul of the security review as model data (which will include intellectual property) is sent unencrypted to the API, and can theoretically be intercepted. As such I can't install this plugin.

I'm sure other enterprise users will face the same restrictions, which is a shame as I've tested this conceptually and it meets my needs for ontology building.

matheuslenke commented 1 month ago

Hey Laura 👋🏼

I'm helping maintaining OntoUML repos for now. Thanks for pointing the need of changing to https at the plugin. I created an issue at the ontouml-server repository, where we need to first change, and will work on that.

Laura-Ngo commented 1 month ago

Thank you, @matheuslenke - really appreciate this. It's really difficult for enterprises to take on and maintain anything open source, so I didn't have any success in getting the ontouml-server self-hosted in our enterprise environment. Using https would solve all my issues!