Sebb created DATAFU-137:
---------------------------
Summary: KEYS sigs and hashes must be linked from the download page
Key: DATAFU-137
URL: https://issues.apache.org/jira/browse/DATAFU-137
Project: DataFu
Issue Type: Bug
Reporter: Sebb
The download page refers to verifying downloads, but leaves it up to the user
to find the sigs and hashes.
The sigs and hashes should be listed beside the files to which they apply.
See for example:
https://httpd.apache.org/download.cgi#apache24
which uses a simple table.
URLs should use https, e.g.
https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc
The KEYS file URL should use https, and must use the ASF main host, i.e.
https://www.apache.org/dist/incubator/datafu/KEYS
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)