MD5 is not the PGP keys, its just a hash of the distribution. Our KEYS file is located here:
http://www.apache.org/dist/click/KEYS We have some instructions for importing KEYS and verification but it is targeted at the release manager, not the end user: http://click.apache.org/docs/developer-guide/releasing.html (See Prerequisites) On 2/06/2010 16:38, Adrian A. wrote: >> On our download pages, we need to link to the KEYS files > But we already do this. See the screenshot in attachment. > >> and provide instructions on how to verify a >> download. Here is a good example: >> >> http://incubator.apache.org/photark/photark-downloads.html > OK. I'll update the docs on how the users can verify the keys. Great thanks. Bob
