Fwd: Returned post for announce@apache.org

[Shruthi M R <sh...@apache.org>]

Hi All,

My previous attempts to post to the apache announce was unsuccessful. So I
requested them to share the specific reason for rejection.
Below is the reply from the group,

 "The announcement contains direct links to the mirrors.
However these do not give access to the KEYS, sigs and hashes which are
needed for verification.
It is important that downloaders are reminded to verify downloads.
*Whilst the download page contains links to hashes and sigs it does not
contain the KEYS or verification instructions.*
It's also quite difficult to find the download links as is part of quite a
long page."

Based on the reply I will remove the link to -
https://www.apache.org/dyn/closer
<https://www.apache.org/dyn/closer.cgi?path=/fineract/1.2.0/apache-fineract-1.2.0-binary.tar.gz>
. But it looks like we need to update our website to include other
mentioned points.

Kindly advise

Thank You,

*Shruthi M R*

---------- Forwarded message ---------
From: Private List Moderation <mo...@gsuite.cloud.apache.org>
Date: Fri, Dec 21, 2018 at 2:41 PM
Subject: Re: Returned post for announce@apache.org
To: Shruthi M R <sh...@apache.org>




On Fri, 21 Dec 2018 at 04:49, Shruthi M R <sh...@apache.org> wrote:

> Hi Team,
>
> I am not able to figure out why this announcement was returned, I thought
> the mail fulfilled all the criteria listed.
> Kindly let me know the reason for rejecting the announcement, so that I
> can correct it and post to the group again.
>
>
The announcement contains direct links to the mirrors.
However these do not give access to the KEYS, sigs and hashes which are
needed for verification.

It is important that downloaders are reminded to verify downloads.

Whilst the download page contains links to hashes and sigs it does not
contain the KEYS or verification instructions.
It's also quite difficult to find the download links as is part of quite a
long page.

Sebb

> Thank you,
> Shruthi
>
> On Thu, Dec 13, 2018 at 4:03 PM <an...@apache.org> wrote:
>
>>
>> Hi! This is the ezmlm program. I'm managing the
>> announce@apache.org mailing list.
>>
>> I'm sorry, your message (enclosed) was not accepted by the moderator.
>> If the moderator has made any comments, they are shown below.
>>
>> >>>>> -------------------- >>>>>
>> Announcements of Apache project releases must contain a link to the
>> relevant download page. [1]
>> The download page must provide public download links where current
>> official
>> source releases and accompanying cryptographic files may be obtained. [2]
>> It must also link to the KEYS file at
>> https://www.apache.org/dist/<project>/KEYS,
>> and provide details of how to verify a download using the signature or a
>> hash.
>>
>> Announcements that contain a link to the dyn/closer page alone will be
>> rejected by the moderators.
>>
>> Announcements that contain a link to the dist.apache.org host will be
>> rejected by the moderators.
>>
>> Announcements that contain a link to a web page that does not include a
>> link to a mirror to the artifact plus links to the signature and at least
>> one sha checksum will be rejected.
>>
>> [1] http://www.apache.org/legal/release-policy.html#release-announcements
>> [2] https://www.apache.org/dev/release-distribution#download-links
>>
>> Sebb
>> <<<<< -------------------- <<<<<
>>
>>
>>
>>
>> ---------- Forwarded message ----------
>> From: Shruthi M R <sh...@apache.org>
>> To: announce@apache.org
>> Cc: Ed Cable <ed...@mifos.org>
>> Bcc:
>> Date: Thu, 13 Dec 2018 12:55:24 +0530
>> Subject: [ANNOUNCE] Apache Fineract 1.2.0 released
>>
>> Hi all,
>> The Apache Fineract team would like to announce the release of Apache Fineract 1.2.0 with source and binary artifacts.
>> Apache Fineract is an open source system for core banking as a platform. Fineract provides a reliable, robust, and affordable solution for entrepreneurs, financial institutions, and service providers to offer financial services to the world’s 2 billion under banked and unbanked.
>>
>> More details regarding Apache Fineract can be found at http://fineract.apache.org/
>>
>> The release is available from  http://fineract.apache.org/
>>
>> Or you can download the source from https://www.apache.org/dyn/closer.cgi?path=/fineract/1.2.0/apache-fineract-1.2.0-src.tar.gz
>>
>> And the binary from https://www.apache.org/dyn/closer.cgi?path=/fineract/1.2.0/apache-fineract-1.2.0-binary.tar.gz
>>
>> The full change log is available here : https://cwiki.apache.org/confluence/display/FINERACT/1.2.0+-+Apache+Fineract
>>
>> We welcome your help and feedback. For more information on how to report problems, or on how to get involved, visit the project website at http://fineract.apache.org/. To report issues, visit https://issues.apache.org/jira/browse/FINERACT
>>
>> Thanks!
>> The Apache Fineract Team
>>
>>