[jira] [Commented] (KAFKA-378) mirrors but must never be used for verification

["Jun Rao (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KAFKA-378?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13403148#comment-13403148 ] 

Jun Rao commented on KAFKA-378:
-------------------------------

+1
                
> mirrors but must never be used for verification
> -----------------------------------------------
>
>                 Key: KAFKA-378
>                 URL: https://issues.apache.org/jira/browse/KAFKA-378
>             Project: Kafka
>          Issue Type: Bug
>            Reporter: Joe Stein
>             Fix For: 0.7.1
>
>         Attachments: KAFKA-378.patch
>
>
> http://incubator.apache.org/guides/releasemanagement.html#understanding-distribution
> Mirrored copies of checksums, KEYS and signature files (.asc and .md5 files) will be present on the mirrors but must never be used for verification. So, all links from the podling website to signatures, sums and KEYS need to refer to the original documents on www.apache.org

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira