Sebb created CARBONDATA-2861:
--------------------------------
Summary: Issues with download page
Key: CARBONDATA-2861
URL: https://issues.apache.org/jira/browse/CARBONDATA-2861
Project: CarbonData
Issue Type: Bug
Reporter: Sebb
The download page currently links to https://dist.apache.org/
However that host is only intended as a staging area for use by developers.
Download pages must use the ASF mirror system for build artifacts, and must use
https://www.apache.org/dist/... for KEYS, sigs and hashes.
The download page must provide public download links where current official
source releases and accompanying cryptographic files may be obtained. [2]
Links to the download artifacts must support downloads from mirrors, e.g. via
links to
dyn/closer.
Links to metadata (SHA, ASC) must be to
https://www.apache.org/dist/<project>/<release>/*
MD5 is no longer considered useful and should not be used. SHA is required.
Similarly, SHA-1 is no longer considered useful and should not be used.
SHA-512 (preferred) or SHA-256 are required for new releases. Older releases
need not be updated, may continue unchanged, and might use MD5 or SHA-1.
The KEYS link must be to https://www.apache.org/dist/<project>/KEYS
[1] http://www.apache.org/legal/release-policy.html#release-announcements
[2] https://www.apache.org/dev/release-distribution#download-links
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
