Bug 148783 - Website: OpenPGP signatures for downloads hard to find
Summary: Website: OpenPGP signatures for downloads hard to find
Status: RESOLVED NOTABUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: All All
: medium normal
Assignee: Not Assigned
URL: https://www.libreoffice.org/download/...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-04-25 22:18 UTC by mancha
Modified: 2022-04-26 19:13 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:

Attachments
LO download website 2022-04-26 (285.50 KB, image/png)
2022-04-26 09:21 UTC, steve 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description mancha 2022-04-25 22:18:56 UTC 
LibreOffice binaries/installers are PGP-signed (good) but detached signatures aren't found on download page (not that good). One must do some detective work to find them.

Suggestion: please include link to corresponding .asc file on download page.
Comment 1 steve 2022-04-26 09:21:07 UTC 
Created attachment 179782 [details]
LO download website 2022-04-26

Confirmed, looking at the download page, there is no trace of the signature file, which should be available. Attaching screenshot of current website design of download page.

sha checksums (why are MD5 and sha1 even provided?) as well as OpenPGP signature are currently hidden behind the opaque "Info" link.
Comment 2 mancha 2022-04-26 19:13:54 UTC 
I thought I had looked at the info link but it's all there. I regret creating the bug. Changing to RESOLVED/NOTABUG. Apologies for noise.