Sebb created APEXCORE-797: ----------------------------- Summary: Download page must not link to dist.apache.org Key: APEXCORE-797 URL: https://issues.apache.org/jira/browse/APEXCORE-797 Project: Apache Apex Core Issue Type: Bug Reporter: Sebb
The download page currently links to https://dist.apache.org/ for the hashes and sigs. However that host is only intended as a staging area for use by developers. Please can you change the links to use the ASF webserver instead? e.g. change https://dist.apache.org/repos/dist/release/apex/apache-apex-core-3.6.0/apache-apex-core-3.6.0-source-release.zip.asc to https://www.apache.org/dist/apex/apache-apex-core-3.6.0/apache-apex-core-3.6.0-source-release.zip.asc etc. Also the download page should have a link to the KEYS file: https://www.apache.org/dist/apex/KEYS And it would be helpful to provide some instructions for using the sigs and hashes: https://www.apache.org/dyn/closer.cgi#verify Thanks -- This message was sent by Atlassian JIRA (v6.4.14#64029)