[SCB-1578] Download pages must provide hashes, sigs etc

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: website
• Assignee: Willem Jiang
• Reporter: Sebb
• Created: 09/Nov/19 13:46
• Updated: 09/Nov/19 15:20
• Resolved: 09/Nov/19 15:16

Description

All download pages must provide:

• links to download current sources using the ASF mirror system
• links to KEYS, sigs, hashes under https://[www.]apache.org/dist/project/
• statement that downloads must be verified and how to do so

Whilst this is true of the download page
http://servicecomb.apache.org/release/service-center-downloads/

it is not true of the page:
http://servicecomb.apache.org/release/

It might make sense to change the page to link to the individual download pages instead.
i.e. link to
http://servicecomb.apache.org/release/service-center-downloads/
http://servicecomb.apache.org/release/kie-downloads/
etc.