[
https://issues.apache.org/jira/browse/DATAFU-137?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16370397#comment-16370397
]
Sebb commented on DATAFU-137:
-----------------------------
The page says:
"Download one of the source releases from the list below:"
It does not make it clear which release to choose.
It may not be obvious to everyone that one is the current release and the
others are older releases.
For example the different releases could be intended for different host/OS
combinations.
> KEYS sigs and hashes must be linked from the download page
> ----------------------------------------------------------
>
> Key: DATAFU-137
> URL: https://issues.apache.org/jira/browse/DATAFU-137
> Project: DataFu
> Issue Type: Bug
> Environment: http://datafu.incubator.apache.org/docs/download.html
> Reporter: Sebb
> Priority: Major
>
> The download page refers to verifying downloads, but leaves it up to the user
> to find the sigs and hashes.
> The sigs and hashes should be listed beside the files to which they apply.
> See for example:
> https://httpd.apache.org/download.cgi#apache24
> which uses a simple table.
> URLs should use https, e.g.
> https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc
> The KEYS file URL should use https, and must use the ASF main host, i.e.
> https://www.apache.org/dist/incubator/datafu/KEYS
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
