Return-Path:
X-Original-To: apmail-commons-dev-archive@www.apache.org
Delivered-To: apmail-commons-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
by minotaur.apache.org (Postfix) with SMTP id 01DED106AC
for ;
Fri, 2 Jan 2015 09:04:52 +0000 (UTC)
Received: (qmail 66895 invoked by uid 500); 2 Jan 2015 09:04:52 -0000
Delivered-To: apmail-commons-dev-archive@commons.apache.org
Received: (qmail 66746 invoked by uid 500); 2 Jan 2015 09:04:52 -0000
Mailing-List: contact dev-help@commons.apache.org; run by ezmlm
Precedence: bulk
List-Help:
List-Unsubscribe:
List-Post:
List-Id:
Reply-To: "Commons Developers List"
Delivered-To: mailing list dev@commons.apache.org
Received: (qmail 66735 invoked by uid 99); 2 Jan 2015 09:04:52 -0000
Received: from mail-relay.apache.org (HELO mail-relay.apache.org)
(140.211.11.15)
by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 02 Jan 2015 09:04:52 +0000
Received: from mail-wg0-f42.google.com (mail-wg0-f42.google.com
[74.125.82.42])
by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with
ESMTPSA id B0A0A1A0041
for ; Fri, 2 Jan 2015 09:04:51 +0000 (UTC)
Received: by mail-wg0-f42.google.com with SMTP id k14so23894802wgh.1
for ; Fri, 02 Jan 2015 01:04:49 -0800 (PST)
MIME-Version: 1.0
X-Received: by 10.180.39.204 with SMTP id r12mr87534950wik.11.1420189489633;
Fri, 02 Jan 2015 01:04:49 -0800 (PST)
Received: by 10.194.25.162 with HTTP; Fri, 2 Jan 2015 01:04:49 -0800 (PST)
In-Reply-To: <20141231190022.00001394.ecki@zusammenkunft.net>
References: <20141229204833.00002995.ecki@zusammenkunft.net>
<20141229211338.00007c3b.ecki@zusammenkunft.net>
<20141229215823.0000637c.ecki@zusammenkunft.net>
<20141231190022.00001394.ecki@zusammenkunft.net>
Date: Fri, 2 Jan 2015 10:04:49 +0100
Message-ID:
Subject: Re: [site][build-plugin] Keys link link on download page
From: Benedikt Ritter
To: Commons Developers List
Content-Type: multipart/alternative; boundary=001a11c3649c0b1f81050ba7a291
--001a11c3649c0b1f81050ba7a291
Content-Type: text/plain; charset=UTF-8
Hello Bernd,
2014-12-31 19:00 GMT+01:00 Bernd Eckenfels :
> Hello Benedikt,
>
> I have pushed an updated download page text (a bit shorter than your
> proposal).
>
> I also made changes to CONTRIBUTING/README.md goals which will work for
> VFS (more or less, some manual work is required for javadoc url and
> download url). But the change uses an ugly hack thats why I havent
> commited it yet, you find the patch here:
>
> https://issues.apache.org/jira/browse/COMMONSSITE-81
>
> (can you especially confirm that changing the pom
> (commons.componentid) of the plugin project is fine).
>
I'll try to have a look today or tomorrow.
Benedikt
>
> Gruss
> Bernd
>
> Am Wed, 31 Dec 2014 15:59:19 +0100
> schrieb Benedikt Ritter :
>
> > Hey Bernd,
> >
> > note that the readme and contributing goals still don't really work
> > for multi module projects. But I think that can be fixed in the next
> > release if anybody has the time?
> >
> > Benedikt
> >
> > 2014-12-29 21:58 GMT+01:00 Bernd Eckenfels :
> >
> > > Hello sebb,
> > >
> > > ok I can amend my changes to add this. I will wait a day to see if
> > > more issues come up.
> > >
> > > I was trying to be brief as we have the validation
> > > page explaining all, but it might be good to be a bit verbose here.
> > >
> > > Gruss
> > > Bernd
> > >
> > >
> > > Am Mon, 29 Dec 2014 20:51:21 +0000
> > > schrieb sebb :
> > >
> > > > On 29 December 2014 at 20:13, Bernd Eckenfels
> > > > wrote:
> > > > > Am Mon, 29 Dec 2014 20:01:29 +0000
> > > > > schrieb sebb :
> > > > >
> > > > >> On 29 December 2014 at 19:48, Bernd Eckenfels
> > > > >> wrote:
> > > > >> > The download page of apache commons reads like there is
> > > > >> > supposed to be a KEYS column in the table. But it is now a
> > > > >> > general link, so I would apply the following changes, if you
> > > > >> > agree:
> > > > >>
> > > > >> I think the reference to the KEYS file needs to come before the
> > > > >> hashes. We want to encourage sig checking as the primary way to
> > > > >> check downloads.
> > > > >>
> > > > >> But I agree that the text needs some TLC.
> > > > >
> > > > > Cool, how is this:
> > > > >
> > > > >
> > > > > Please > > > > href="http://www.apache.org/info/verification.html">verify the
> > > > > integrity of downloaded files against the public code
> > > > > signing > > > > href="http://www.apache.org/dist/commons/KEYS">KEYS used by
> > > > > the Apache Commons developers.
> > > > > The pgp
link downloads the OpenPGP
> > > > > compatible signature from our main site. The md5
> > > > > link downloads the checksum from the main site.
> > > > >
> > > >
> > > > Better, but the verification is not actually against the KEYS
> > > > file. How about:
> > > >
> > > >
> > > > It is essential that you > > > href="http://www.apache.org/info/verification.html">verify the
> > > > integrity
> > > > of downloaded files, preferabley using the
> > > > PGP
signature; failing that using the
> > > > MD5
hash.
> > > >
> > > > The > > > href="http://www.apache.org/dist/commons/KEYS">KEYS file
> > > > contains the public keys used by Apache Commons developers to
> > > > sign releases. It is used in conjunction with the
> > > > PGP
signature for the download
> > > >
> > > >
> > > > The PGP
link downloads the OpenPGP compatible
> > > > signature from our main site.
> > > > The MD5
link downloads the checksum from our
> > > > main site.
> > > >
> > > >
> > > > I'm sure this could be improved further.
> > > >
> > > > The generated links should probably also upcased to PGP and MD5 so
> > > > they stand out better.
> > > >
> > > > > Gruss
> > > > > Bernd
> > > > >
> > > > >
> ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> > > > > For additional commands, e-mail: dev-help@commons.apache.org
> > > > >
> > > >
> > > > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> > > > For additional commands, e-mail: dev-help@commons.apache.org
> > > >
> > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> > > For additional commands, e-mail: dev-help@commons.apache.org
> > >
> > >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>
--
http://people.apache.org/~britter/
http://www.systemoutprintln.de/
http://twitter.com/BenediktRitter
http://github.com/britter
--001a11c3649c0b1f81050ba7a291--