[jira] [Commented] (OFBIZ-10140) Please use SSL (https) for KEYS, sigs, hashes

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-10140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16313940#comment-16313940 ]

Sebb commented on OFBIZ-10140:
------------------------------

It's not working for me; the sigs and hashes don't use https.
This appears to be because the links don't include the protocol:

 <a href ="//www.apache.org/dist/ofbiz/apache-ofbiz-16.11.04.zip.asc" target="external">[PGP]</a>

Do not default the protocol here.

Also I could find no link to the KEYS file.

> Please use SSL (https) for KEYS, sigs, hashes
> ---------------------------------------------
>
>                 Key: OFBIZ-10140
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10140
>             Project: OFBiz
>          Issue Type: Bug
>         Environment: http://ofbiz.apache.org/download.html
>            Reporter: Sebb
>            Assignee: Michael Brohl
>
> As the subject says: Please use https (SSL) for links to KEYS, hashes, sigs.
> Also the download page must have a link to the KEYS file, i.e.
> https://www.apache.org/dist/ofbiz/KEYS

--
This message was sent by Atlassian JIRA
(v6.4.14#64029)