Unencrypted API connection - http not https

[Laura-Ngo]

Would it be possible to use https://api.ontouml.org instead of http://api.ontouml.org?

I'm trying to get Visual Paradigm (enterprise edition) and this plugin installed at my workplace but have fallen foul of the security review as model data (which will include intellectual property) is sent unencrypted to the API, and can theoretically be intercepted. As such I can't install this plugin.

I'm sure other enterprise users will face the same restrictions, which is a shame as I've tested this conceptually and it meets my needs for ontology building.

[matheuslenke]

Hey Laura 👋🏼

I'm helping maintaining OntoUML repos for now. Thanks for pointing the need of changing to https at the plugin. I created an issue at the ontouml-server repository, where we need to first change, and will work on that.

[Laura-Ngo]

Thank you, @matheuslenke - really appreciate this. It's really difficult for enterprises to take on and maintain anything open source, so I didn't have any success in getting the ontouml-server self-hosted in our enterprise environment. Using https would solve all my issues!