nodejs.org icon indicating copy to clipboard operation
nodejs.org copied to clipboard

Improve the download page's "Signed SHASUMS for release files (How to verify)" links

Open adufourcq opened this issue 4 years ago • 1 comments
trafficstars

On the download page (https://nodejs.org/en/download/), there is two links, grouped together, related to the verification of the binary files: "Signed SHASUMS for release files" and "How to verify"

While the purpose of these two links is related, they are not directly related. The "How to verify" link explains how to verify the checksum of the downloadable files and how to verify the SHASUMS256.txt file's signature, but it never talks about the SHASUMS256.txt.asc file.

My suggestions are the following:

  • uncoupled those links
  • change the name of the "How to verify" link to something like "How to verify the checksum of the downloaded files with the SHASUMS256.txt file"
  • add download links to the SHASUMS256.txt and SHASUMS256.txt.sig files (i know that we can download them with the instructions in the README file or following the "All download options" link, but it would simplify the process)
  • Add an explanation (a link to a new section of the README file?) of how to deal with the SHASUMS256.txt.asc file, with a link named something like "How to verify the checksum of the downloaded files with the SHASUMS256.txt.asc file"
  • change the "Signed SHASUMS for release files" with an equivalent of the SHASUMS256.txt and SHASUMS256.txt.sig download links

Instructions on how to verify the checksum on Windows would also be great.

I can participate in changes to the website through a pull request if you think these changes (or others) make sense.

adufourcq avatar Sep 15 '21 22:09 adufourcq

@adufourcq , I agree with you. It looks like one link. Maybe put it on a new line like so:

<a href="">Signed SHAsum</a>
<br>
<a href="">How to verify a SHAsum</a>

Pandademic avatar Oct 09 '21 15:10 Pandademic