[jira] [Resolved] (SLING-7474) Please use HTTPS for sigs and hashes

["Bertrand Delacretaz (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SLING-7474?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bertrand Delacretaz resolved SLING-7474.
----------------------------------------
    Resolution: Fixed
      Assignee: Bertrand Delacretaz

Thanks Sebb, good points! I have made the https and KEYS changes at [http://sling.apache.org/downloads.cgi] and created SLING-7477 for explaining the verification.

> Please use HTTPS for sigs and hashes
> ------------------------------------
>
>                 Key: SLING-7474
>                 URL: https://issues.apache.org/jira/browse/SLING-7474
>             Project: Sling
>          Issue Type: Bug
>          Components: Site
>            Reporter: Sebb
>            Assignee: Bertrand Delacretaz
>            Priority: Major
>
> Please use HTTPS for links to hashes and sigs on the download page.
> Also, the KEYS file must be linked from https://www.apache.org/dist/sling/KEYS
> and NOT
> https://people.apache.org/keys/group/sling.asc
> which is unsuitable for the reasons noted here:
> https://people.apache.org/keys/
> Thanks



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)