Sebb created DATAFU-137:
---------------------------

             Summary: KEYS sigs and hashes must be linked from the download page
                 Key: DATAFU-137
                 URL: https://issues.apache.org/jira/browse/DATAFU-137
             Project: DataFu
          Issue Type: Bug
            Reporter: Sebb


The download page refers to verifying downloads, but leaves it up to the user 
to find the sigs and hashes.

The sigs and hashes should be listed beside the files to which they apply.
See for example:
https://httpd.apache.org/download.cgi#apache24
which uses a simple table.

URLs should use https, e.g.
https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc

The KEYS file URL should use https, and must use the ASF main host, i.e.
https://www.apache.org/dist/incubator/datafu/KEYS




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to