socrata / datasync

Desktop / Console application for updating Socrata datasets automatically.
http://socrata.github.io/datasync/
MIT License
80 stars 33 forks source link

Is publish method actually using HTTP or is it using HTTPS? #104

Closed shua123 closed 8 years ago

shua123 commented 9 years ago

Is publish method actually using HTTP or is it using HTTPS?

levyj commented 9 years ago

If you change anything, please retain backwards compatibility to any flags that refer to HTTP. Otherwise, it creates a barrier to upgrading DataSync. Thanks.

shua123 commented 8 years ago

In 1.6 the GUI was changed to no longer mention HTTP in the update method selection so I changed the title of this issue as the original title is no longer reflective of the question.

The question still remains though on what exactly DataSync is using. Is it HTTP or HTTPS or both? WIth increasing emphasis on the use of HTTPS in government, DataSync documentation should clearly explain what protocols, processes, & methods are in use.

chrismetcalf commented 8 years ago

I'd like @NithyaChandru to confirm, but given that it's an authenticated request, it's required to go over HTTPS. We reject all requests trying to send authentication over insecure HTTP.

NithyaChandru commented 8 years ago

@chrismetcalf is correct. Thanks for your feedback. We will review the documentation and update it accordingly.