Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
Please use HTTPS for links to hashes and sigs on the download page.
Also, the KEYS file must be linked from https://www.apache.org/dist/sling/KEYS
and NOT
https://people.apache.org/keys/group/sling.asc
which is unsuitable for the reasons noted here:
https://people.apache.org/keys/
Thanks