[ https://issues.apache.org/jira/browse/DATAFU-137?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16370351#comment-16370351 ]
Yuval Allweil commented on DATAFU-137: -------------------------------------- Sorry for the late response, I've been busy! To be clear, you want the download links to be in this format: * *Source [apache-datafu-incubating-1.3.3|http://www.apache.org/dyn/closer.cgi/incubator/datafu/apache-datafu-incubating-1.3.3/] [ PGP ] [ MD5 ] [ SHA512 ]* With the extensions: PGP: .asc MD5: .md5 SHA512: .sha512 For the KEYS link, you just want one to link to [https://www.apache.org/dist/incubator/datafu/KEYS], none for the backup? > KEYS sigs and hashes must be linked from the download page > ---------------------------------------------------------- > > Key: DATAFU-137 > URL: https://issues.apache.org/jira/browse/DATAFU-137 > Project: DataFu > Issue Type: Bug > Reporter: Sebb > Priority: Major > > The download page refers to verifying downloads, but leaves it up to the user > to find the sigs and hashes. > The sigs and hashes should be listed beside the files to which they apply. > See for example: > https://httpd.apache.org/download.cgi#apache24 > which uses a simple table. > URLs should use https, e.g. > https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc > The KEYS file URL should use https, and must use the ASF main host, i.e. > https://www.apache.org/dist/incubator/datafu/KEYS -- This message was sent by Atlassian JIRA (v7.6.3#76005)