Uploaded image for project: 'Apache ServiceComb'
  1. Apache ServiceComb
  2. SCB-1578

Download pages must provide hashes, sigs etc

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: website
    • Labels:
      None

      Description

      All download pages must provide:

      • links to download current sources using the ASF mirror system
      • links to KEYS, sigs, hashes under https://[www.]apache.org/dist/project/
      • statement that downloads must be verified and how to do so

      Whilst this is true of the download page
      http://servicecomb.apache.org/release/service-center-downloads/

      it is not true of the page:
      http://servicecomb.apache.org/release/

      It might make sense to change the page to link to the individual download pages instead.
      i.e. link to
      http://servicecomb.apache.org/release/service-center-downloads/
      http://servicecomb.apache.org/release/kie-downloads/
      etc.

        Attachments

          Activity

            People

            • Assignee:
              njiang Willem Jiang
              Reporter:
              sebb Sebb
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: