[
https://issues.apache.org/jira/browse/DATAFU-137?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16373937#comment-16373937
]
Matthew Hayes commented on DATAFU-137:
--------------------------------------
I've attached a patch. Review board here: https://reviews.apache.org/r/65767/
> KEYS sigs and hashes must be linked from the download page
> ----------------------------------------------------------
>
> Key: DATAFU-137
> URL: https://issues.apache.org/jira/browse/DATAFU-137
> Project: DataFu
> Issue Type: Bug
> Environment: http://datafu.incubator.apache.org/docs/download.html
> Reporter: Sebb
> Assignee: Matthew Hayes
> Priority: Major
> Attachments: DATAFU-137.patch
>
>
> The download page refers to verifying downloads, but leaves it up to the user
> to find the sigs and hashes.
> The sigs and hashes should be listed beside the files to which they apply.
> See for example:
> https://httpd.apache.org/download.cgi#apache24
> which uses a simple table.
> URLs should use https, e.g.
> https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc
> The KEYS file URL should use https, and must use the ASF main host, i.e.
> https://www.apache.org/dist/incubator/datafu/KEYS
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
