If the mirrors don't have the signatures, then we should probably link to the mirrors and the signatures separately. It's definitely important to have a link to the mirrors so people can get this through ASF infrastructure without hitting only the main server.
It's true that they don't seem to have them, even for other projects -- for example check out http://mirror.tcpdiag.net/apache/hadoop/common/hadoop-2.0.5-alpha/. Matei On Sep 27, 2013, at 12:04 AM, Patrick Wendell <pwend...@gmail.com> wrote: > On Thu, Sep 26, 2013 at 8:27 PM, Chris Mattmann <mattm...@apache.org> wrote: >> Hey Matei yep they have the signatures on them too. >> >> Cheers, >> Chris > > Chris - I checked a bunch of the mirrors and none of them have the > signatures... am I looking in the wrong place? > > http://www.interior-dsgn.com/apache/incubator/spark/spark-0.8.0-incubating/ > http://mirror.tcpdiag.net/apache/incubator/spark/spark-0.8.0-incubating/ > http://apache.tradebit.com/pub/incubator/spark/spark-0.8.0-incubating/ > > In response to the comment about thousands of downloads - I didn't > mean at all to suggest that Apache couldn't handle this number, in > fact, I'm sure they can! I just wanted to point out that we are > keeping in mind the existing habits and processes of our user base, > and trying to make the transition smooth for them. > > - Patrick
