Matthew Hayes commented on DATAFU-137:

I've attached a patch.  Review board here: https://reviews.apache.org/r/65767/

> KEYS sigs and hashes must be linked from the download page
> ----------------------------------------------------------
>                 Key: DATAFU-137
>                 URL: https://issues.apache.org/jira/browse/DATAFU-137
>             Project: DataFu
>          Issue Type: Bug
>         Environment: http://datafu.incubator.apache.org/docs/download.html
>            Reporter: Sebb
>            Assignee: Matthew Hayes
>            Priority: Major
>         Attachments: DATAFU-137.patch
> The download page refers to verifying downloads, but leaves it up to the user 
> to find the sigs and hashes.
> The sigs and hashes should be listed beside the files to which they apply.
> See for example:
> https://httpd.apache.org/download.cgi#apache24
> which uses a simple table.
> URLs should use https, e.g.
> https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc
> The KEYS file URL should use https, and must use the ASF main host, i.e.
> https://www.apache.org/dist/incubator/datafu/KEYS

This message was sent by Atlassian JIRA

Reply via email to