Details
-
Bug
-
Status: Resolved
-
Critical
-
Resolution: Fixed
-
2.0
-
None
-
web
Description
For security's sake it is customary to serve the checksums from http://www.apache.org/dist ; as it currently stands downloading the file and its checksum from the mirror negate the whole point of having checksums.