[
https://issues.apache.org/jira/browse/BUILDR-353?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12787808#action_12787808
]
Sebb commented on BUILDR-353:
-----------------------------
The normal procedure is to have a single KEYS file for a project.
This contains all present and past keys used for signing.
When a key changes, just add the new key - don't remove the old one unless it
has not been used to sign a release.
> Download page must point to a mirror, not the main Apache server
> ----------------------------------------------------------------
>
> Key: BUILDR-353
> URL: https://issues.apache.org/jira/browse/BUILDR-353
> Project: Buildr
> Issue Type: Bug
> Components: Site/documentation
> Environment: http://buildr.apache.org/download.html#dist
> Reporter: Sebb
> Priority: Critical
>
> The download page must point to a mirror, not the main Apache server.
> The ASF servers should only be used for downloading KEYS and hashes/sigs
> (which are all small).
> Also, the links on the download page to the KEYS files are broken - they
> should point to dist/buildr not dist/buildr/m.n.o
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
