Sebb created AMQ-8357:
-------------------------

             Summary: Download page for 5.16.3 refers to MD5; must not link to 
Git
                 Key: AMQ-8357
                 URL: https://issues.apache.org/jira/browse/AMQ-8357
             Project: ActiveMQ
          Issue Type: Bug
            Reporter: Sebb


The download page [1] refers several times to MD5. Such hashes are deprecated, 
and are not actually used by AMQ any more.

Please update the instructions so that they can be used by downloaders.

Also Git repos must not be linked from download pages, as they contain code 
that has not been formally released.

Note also that MD5 is not a signature (nor are SHA*) - they are hashes.

The PGP asc file is a signature.

[1] https://activemq.apache.org/activemq-5016003-release



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to