Yuval Allweil commented on DATAFU-137:

I apologize, but I'm not going to be able to take on this after all. I'm not 
familiar enough with Ruby/Rails for this and am swamped with work. I assumed 
this was going to be a fix along the lines of the last one I did. 

> KEYS sigs and hashes must be linked from the download page
> ----------------------------------------------------------
>                 Key: DATAFU-137
>                 URL: https://issues.apache.org/jira/browse/DATAFU-137
>             Project: DataFu
>          Issue Type: Bug
>         Environment: http://datafu.incubator.apache.org/docs/download.html
>            Reporter: Sebb
>            Priority: Major
> The download page refers to verifying downloads, but leaves it up to the user 
> to find the sigs and hashes.
> The sigs and hashes should be listed beside the files to which they apply.
> See for example:
> https://httpd.apache.org/download.cgi#apache24
> which uses a simple table.
> URLs should use https, e.g.
> https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc
> The KEYS file URL should use https, and must use the ASF main host, i.e.
> https://www.apache.org/dist/incubator/datafu/KEYS

This message was sent by Atlassian JIRA

Reply via email to