[
https://issues.apache.org/jira/browse/SLING-7474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16354022#comment-16354022
]
Sebb commented on SLING-7474:
-----------------------------
Also it would be helpful to explain to downloaders how to verify releases.
Or at least point to documentation that explains how.
> Please use HTTPS for sigs and hashes
> ------------------------------------
>
> Key: SLING-7474
> URL: https://issues.apache.org/jira/browse/SLING-7474
> Project: Sling
> Issue Type: Bug
> Reporter: Sebb
> Priority: Major
>
> Please use HTTPS for links to hashes and sigs on the download page.
> Also, the KEYS file must be linked from https://www.apache.org/dist/sling/KEYS
> and NOT
> https://people.apache.org/keys/group/sling.asc
> which is unsuitable for the reasons noted here:
> https://people.apache.org/keys/
> Thanks
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
