You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "Robbie Gemmell (Jira)" <ji...@apache.org> on 2021/08/19 09:41:00 UTC
[jira] [Commented] (AMQ-8357) Download page for 5.16.3 refers to
MD5; must not link to Git
[ https://issues.apache.org/jira/browse/AMQ-8357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17401577#comment-17401577 ]
Robbie Gemmell commented on AMQ-8357:
-------------------------------------
It also links to the 5.16.2 release notes.
> Download page for 5.16.3 refers to MD5; must not link to Git
> ------------------------------------------------------------
>
> Key: AMQ-8357
> URL: https://issues.apache.org/jira/browse/AMQ-8357
> Project: ActiveMQ
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Jean-Baptiste Onofré
> Priority: Major
>
> The download page [1] refers several times to MD5. Such hashes are deprecated, and are not actually used by AMQ any more.
> Please update the instructions so that they can be used by downloaders.
> Also Git repos must not be linked from download pages, as they contain code that has not been formally released.
> Note also that MD5 is not a signature (nor are SHA*) - they are hashes.
> The PGP asc file is a signature.
> [1] https://activemq.apache.org/activemq-5016003-release
--
This message was sent by Atlassian Jira
(v8.3.4#803005)