I don't think the bindeps2 usage is fully tested to be released here yet.

what other testing do you want? Travis linux/osx + appveyor all passed for 0.6 and current 0.7. That seems like pretty good coverage to me. If there are additional issues, we'll here about it and can improve BinaryProvider as needed; @staticfloat and @Keno have been more than willing to quickly respond to and fix issues.

see the certificate failure on httpserver on cibot, for example. defaulting to a download where previously none was required strikes me as asking for more problems than it solves

Opened an issue about not using system libraries: JuliaLang/MbedTLS.jl#128

and the httpserver failure on cibot? that looks like a real problem here

@aviks, any idea why we'd have an ssl certificate there? I know the MbedTLS.jl-shipped certificate isn't totally, fresh, but I don't think it's that old either.