Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
-
None
Description
The download page currently links to [https://dist.apache.org/] for the hashes and sigs.
However that host is only intended as a staging area for use by developers.
Please can you change the links to use the ASF webserver instead?
i.e.. change
[https://dist.apache.org/repos/dist/release/.]..
to
[https://www.apache.org/dist/.]..
wherever it appears.
Also the download page should use https (SSL) to link to the KEYS file:
[https://www.apache.org/dist/.../KEYS]