You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2017/12/20 20:06:38 UTC

[GitHub] sebbASF commented on issue #986: Bug: Download page must include KEYS, sig and hashes

sebbASF commented on issue #986: Bug: Download page must include KEYS, sig and hashes
URL: https://github.com/apache/incubator-pulsar/issues/986#issuecomment-353168976
 
 
   Sorry but the page is still incorrect.
   
   KEYS, sigs and hashes must be linked from www.apache.org/dist/... and should use https.
   
   Do not use the archive site (except for old releases that are no longer current)
   
   The dist.apache.org host should never be used for public downloads.
   It is only intended for use by developers during release voting and staging.
   
   The "Other releases" section needs to make it clear that these are older releases.
   Also there should be sigs and hashes for these. 
   The current release KEYS file link (i.e. https://www.apache.org/dist/incubator/pulsar/KEYS) can also be used for past releases as RM keys should not be dropped, only added.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services