infra-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sebb (JIRA)" <>
Subject [jira] [Commented] (INFRA-15700) Issues with default download page
Date Sat, 02 Jun 2018 08:40:00 GMT


Sebb commented on INFRA-15700:

Whilst that allows verification of hashes, I don't think that meets the requirements as per
current policy.

Also it does not deal with signatures and KEYS.

Further, it may be that users wish to have a copy of the sig/hash locally so they can do their
own checks.

> Issues with default download page
> ---------------------------------
>                 Key: INFRA-15700
>                 URL:
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Mirrors, Website
>            Reporter: Sebb
>            Assignee: Henk Penning
>            Priority: Minor
> Strictly speaking, the default download page (e.g.
does not meet the criteria for a download page.
> e.g. There is no link to the KEYS file, no sig, no MD5.
> I think it should be possible to improve the page to add links, particularly if the full
path to the artifact is provided.
> At the very least I think we could make the need to verify downloads much more obvious,
by having that in a separate paragraph.

This message was sent by Atlassian JIRA

View raw message