[
https://issues.apache.org/jira/browse/CALCITE-960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15000183#comment-15000183
]
Sebb commented on CALCITE-960:
------------------------------
That looks good. BTW, the hash and sig links should ideally use https:
Minor nit: the pgp files are not hashes, they are signatures.
So perhaps change the text to:
{quote}
Choose a source distribution in either tar or zip format, and verify using the
corresponding pgp signature (using the committer keys in KEYS).
If you cannot do that, the MD5 hash file may be used to check that the download
has completed OK.
For fast downloads, recent source distributions are hosted on mirror servers;
older source distributions are in the archive or incubator archive.
For security, hash and signature files are always hosted at Apache.
{quote}
It might be worth adding a link to
http://www.apache.org/dyn/closer.cgi#verify
and/or
http://www.apache.org/info/verification.html
> Where is the download page on the website?
> ------------------------------------------
>
> Key: CALCITE-960
> URL: https://issues.apache.org/jira/browse/CALCITE-960
> Project: Calcite
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Julian Hyde
>
> I noticed the recent announce mail of Calcite 1.5.0, which points to the
> generic ASF download page.
> However I could not find any links to download releases on the website.
> I found the developer page, but that only shows links for the current source.
> Have I overlooked the page?
> If so, where is it?
> It would help if there were a page that linked to the official releases on
> the ASF mirror system; this should be clearly linked from the main menu.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
