The download page [1] MUST link to the KEYS file at https://www.apache.org/dist/trafficserver/KEYS
It should also describe how to use the sigs or hashes to verify downloads. MD5 and SHA1 hashes are now deprecated and should not be linked from the download page. [ Full content available at: https://github.com/apache/trafficserver/issues/4321 ] This message was relayed via gitbox.apache.org for [email protected]
