[
https://issues.apache.org/jira/browse/LUCENE-10179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17429337#comment-17429337
]
Mike Drob commented on LUCENE-10179:
------------------------------------
{quote}We should probably also update the website Download page to use
dlcdn.apache.org directly instead of closer.lua? There are redirects, so not
urgent...
{quote}
I asked infra about this, they would prefer that we continue to use closer.lua
just in case the CDN is ever temporarily down. I don't know what specifically
will happen, but it sounds like they have thought about it and have a plan.
However, there's a redirect feature we can use and it will sort itself out
whether it needs to go to dlcdn, downloads, or archive.
[https://www.apache.org/dyn/closer.lua?action=download&filename=/lucene/java/8.10.0/lucene-8.10.0-src.tgz]
{quote}Do you know if this changes anything related to how we trust downloads
from CDN vs archive? I.e. could we now retrieve .asc and KEYS files from CDN?
We could not trust those from the mirrors.. I suppose the CDN infrastructure is
potentially vulnerable to attacks, so the same precaution is valid?
{quote}
Policy hasn't been updated yet, but word from INFRA is that it should be safe
for keys/sigs.
> [release wizard] No longer check for release status on mirrors
> --------------------------------------------------------------
>
> Key: LUCENE-10179
> URL: https://issues.apache.org/jira/browse/LUCENE-10179
> Project: Lucene - Core
> Issue Type: Task
> Reporter: Mike Drob
> Assignee: Jan Høydahl
> Priority: Major
>
> The ASF has moved to a CDN instead of the mirror system. We don't need to
> update our upload steps, but checking mirrors is no longer necessary I
> believe.
>
> https://blogs.apache.org/foundation/entry/apache-software-foundation-moves-to
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
