mailcore2-ios http

[Kharchevskyi]

@tomholub please take a look

From pod instal logs

'mailcore2-ios' uses the unencrypted 'http' protocol to transfer the Pod. Please be sure you're in a safe network with only trusted hosts. Otherwise, please reach out to the library author to notify them of this security issue.

[tomholub]

Please see if there is something you could do Alex

[seisvelas]

This is fixed in master but they haven't done a release in a long time. They have an issue for it on their repo as well: MailCore/mailcore2#1710, which offers a solution:

@siberianisaev I got the same error, but it appears to be fixed in master, perhaps by MailCore/mailcore2@b99e4ea. You can use it in your Podfile like this:

pod 'mailcore2-ios', :git => 'https://github.com/MailCore/mailcore2.git', :commit => 'e6b4597d3b'

Originally posted by @lehrblogger in MailCore/mailcore2#1710 (comment)

So we should be able to switch to this in our Podfile:

pod 'mailcore2-ios', :git => 'https://github.com/MailCore/mailcore2.git', :commit => '1434761'

to use commit MailCore/mailcore2@1434761 (currently the most recent one, or we could do the exact commit that fixed https)

I see we also have a Podfile.lock, so in addition to changing the Podfile, we'll have to regenerate and check in the updated lock.

Let me know if this jives with y'all's understanding of the situation!

[tomholub]

Sounds good to me, as a fix until they release a new version