[ 
https://issues.apache.org/jira/browse/NETBEANS-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16307436#comment-16307436
 ] 

Markus KilÄs commented on NETBEANS-120:
---------------------------------------

Please make secure installation easier for those that care about what runs on 
their systems or on the systems for which they might use the IDE to develop 
software for by providing the necessary means of verifying the software.

In particular:
- Both download page/site and the download target should use HTTPS
- Provide hashes (minimum SHA-256) on a secure (i.e. HTTPS) page on a 
Apache/NetBeans server
- Digitally sign the releases (for example use Authenticode for the Windows 
binaries/installers and OpenPGP for the Linux and ZIP releases)

> Discuss and design Download(s) area for new website
> ---------------------------------------------------
>
>                 Key: NETBEANS-120
>                 URL: https://issues.apache.org/jira/browse/NETBEANS-120
>             Project: NetBeans
>          Issue Type: Task
>          Components: website
>            Reporter: Wade Chandler
>
> The new web site will need a Download/s area. See other Apache projects for 
> ideas, but specifically, see the Groovy site 
> http://groovy-lang.org/download.html. Too, will NetBeans continue to have 
> various "lightweight" installers such as the C/C++, PHP, or Java only 
> configurations like at the current site? These are different decisions which 
> need to be made which can have impacts on the design of the downloads page.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Reply via email to