Merge pull request #25 from apache/ottlinger-patch-1

[Security] Do not use http to transfer artifacts