Hi all, following up the mail by the Apache Security team. I saw that currently we are downloading the Spark distribution from http, instead of https. Unfortunately, I saw no mirror for https other than the backup ones. Do you know of a https mirror for it?
Moreover, I saw that our dependency for spark 2.4 is 2.4.0, and the binaries are not anymore available for it on the mirror. Are there objections to move to 2.4.3? If not I'll go ahead and create a JIRA/PR for it. Thanks, Marco
