[ https://issues.apache.org/jira/browse/SLING-7474?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bertrand Delacretaz resolved SLING-7474. ---------------------------------------- Resolution: Fixed Assignee: Bertrand Delacretaz Thanks Sebb, good points! I have made the https and KEYS changes at [http://sling.apache.org/downloads.cgi] and created SLING-7477 for explaining the verification. > Please use HTTPS for sigs and hashes > ------------------------------------ > > Key: SLING-7474 > URL: https://issues.apache.org/jira/browse/SLING-7474 > Project: Sling > Issue Type: Bug > Components: Site > Reporter: Sebb > Assignee: Bertrand Delacretaz > Priority: Major > > Please use HTTPS for links to hashes and sigs on the download page. > Also, the KEYS file must be linked from https://www.apache.org/dist/sling/KEYS > and NOT > https://people.apache.org/keys/group/sling.asc > which is unsuitable for the reasons noted here: > https://people.apache.org/keys/ > Thanks -- This message was sent by Atlassian JIRA (v7.6.3#76005)