sebbASF commented on issue #1033: Download page must include links to KEYS, sigs, hashes URL: https://github.com/apache/incubator-skywalking/issues/1033#issuecomment-378680988 Sorry, but the KEYS, sigs and hashes URLs must not use dist.apache.org. That host is not intended for public use; it is only for ASF developers when staging releases. As per the next section on the same page: http://www.apache.org/dev/release-distribution#download-links "All links to checksums, detached signatures and public keys MUST reference www.apache.org/dist/ using https:// (TLS)." For example: https://www.apache.org/dist/incubator/skywalking/5.0.0-alpha/KEYS Also the KEYS file must contain the keys for all releases, so it should be in the parent directory, i.e. https://www.apache.org/dist/incubator/skywalking/KEYS
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services
