The update_fetch_with_http_fallback setting is deprecated in drupal:11.5.0 and will be removed in drupal:12.0.0.
This setting allowed sites to fall back to HTTP when HTTPS requests to updates.drupal.org failed. Using HTTP for update requests exposes sites to potential man-in-the-middle attacks and should not be used.
Sites experiencing HTTPS connection issues should resolve them directly (e.g. by ensuring OpenSSL is properly configured) rather than relying on this insecure fallback.
Before
$settings['update_fetch_with_http_fallback'] = TRUE;
After
(line removed)
Sites that explicitly set $settings['update_fetch_with_http_fallback'] = TRUE; in settings.php must remove that line.
If your site relies on this setting because HTTPS connections to updates.drupal.org are failing, resolve the underlying SSL/TLS issue instead.
See https://www.drupal.org/docs/system-requirements/php-requirements#openssl
---
