leezu edited a comment on pull request #18487:
URL: https://github.com/apache/incubator-mxnet/pull/18487#issuecomment-639968083


   @justinmclean thanks. Yes, that's a reasonable setup. My question is if the 
policy should be updated to reflect what you say? Currently using 
archive.apache.org for old release signatures is non-compliant according to the 
policy. That seems to be a mistake in the policy
   
   My second concern is that Release Download Page policy states
   
   > must have at least one link to the current release. This link must use the 
"closer" utility. For example: 
https://www.apache.org/dyn/closer.lua/PROJECT/VERSION/SOURCE-RELEASE.
   
   but Release Distribution Policy states that
   
   > Links to mirrored distribution artifacts must not reference the main 
Apache web site
   
   However, "www.apache.org" is "the main Apache web site" and thus there is a 
contradiction between the two policies.
   
   Previously I assume that you took issue with using 
"https://www.apache.org/dyn/closer.lua/";, as it's not on 
https://downloads.apache.org/ or https://archive.apache.org/dist (as per your 
comment in 
https://github.com/apache/incubator-mxnet/pull/18487#issuecomment-639915329) 
But after reading the Release Download Page policy it appears the existing 
Download page is compliant already, modulo the contradictions between Release 
Download Page Policy and Release Distribution Policy. Please advise how to 
resolve the contradiction between the different policies and recommend what 
part of the existing Download page is non-compliant.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to