infra-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sebb (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-15700) Issues with default download page
Date Sat, 02 Jun 2018 08:40:00 GMT

    [ https://issues.apache.org/jira/browse/INFRA-15700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498941#comment-16498941
] 

Sebb commented on INFRA-15700:
------------------------------

Whilst that allows verification of hashes, I don't think that meets the requirements as per
current policy.

Also it does not deal with signatures and KEYS.

Further, it may be that users wish to have a copy of the sig/hash locally so they can do their
own checks.

> Issues with default download page
> ---------------------------------
>
>                 Key: INFRA-15700
>                 URL: https://issues.apache.org/jira/browse/INFRA-15700
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Mirrors, Website
>            Reporter: Sebb
>            Assignee: Henk Penning
>            Priority: Minor
>
> Strictly speaking, the default download page (e.g. https://www.apache.org/dyn/closer.lua/...)
does not meet the criteria for a download page.
> e.g. There is no link to the KEYS file, no sig, no MD5.
> I think it should be possible to improve the page to add links, particularly if the full
path to the artifact is provided.
> At the very least I think we could make the need to verify downloads much more obvious,
by having that in a separate paragraph.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message