Huh. I guess that makes sense. Sorry for the noise.
On Sun, Nov 15, 2015 at 1:26 AM, Gabriel Reid
wrote:
> Hi Nick,
>
> I was totally unaware of this, but apparently the signature files are
> only made available via the main distribution site(s), and
> intentionally not pushed to the mirrors (th
Hi Nick,
I was totally unaware of this, but apparently the signature files are
only made available via the main distribution site(s), and
intentionally not pushed to the mirrors (this is implied at the bottom
of the generic ASF download page[1]). I've verified this on a few
other projects as well.
I'm looking through our past releases on a couple mirrors -- none of them
include checksum or gpg signature files. How have we gotten away with this?
Do we post these files somewhere else?
Thanks,
Nick
