[
https://issues.apache.org/jira/browse/DATAFU-137?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16365386#comment-16365386
]
Eyal Allweil commented on DATAFU-137:
-------------------------------------
[~sheric], can you take a look at this?
> KEYS sigs and hashes must be linked from the download page
> ----------------------------------------------------------
>
> Key: DATAFU-137
> URL: https://issues.apache.org/jira/browse/DATAFU-137
> Project: DataFu
> Issue Type: Bug
> Reporter: Sebb
> Priority: Major
>
> The download page refers to verifying downloads, but leaves it up to the user
> to find the sigs and hashes.
> The sigs and hashes should be listed beside the files to which they apply.
> See for example:
> https://httpd.apache.org/download.cgi#apache24
> which uses a simple table.
> URLs should use https, e.g.
> https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc
> The KEYS file URL should use https, and must use the ASF main host, i.e.
> https://www.apache.org/dist/incubator/datafu/KEYS
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
