[Fedora QA] #237: tests to verify that torrents and mirrors contain signed checksum files

[Fedora QA]

#237: tests to verify that torrents and mirrors contain signed checksum files
-----------------------+---------------------
  Reporter:  robatino  |       Owner:
      Type:  task      |      Status:  closed
  Priority:  major     |   Milestone:
 Component:  Wiki      |     Version:
Resolution:  invalid   |    Keywords:
  Blocking:            |  Blocked By:
-----------------------+---------------------

Comment (by robatino):

 Replying to [comment:10 ausil]:
 > If its wrong it needs to be pointed out before users start downloading
 it. there is a small window where it can be verrified. usually its about 8
 hours. but once its announced to the public we can not change it. we spot
 issues when its just the seeders and those who watch and jump on the
 torrents before announced im ok with fixing it. you have always come after
 we have announced and thats too late

 The window of opportunity before announcement needs to be formalized,
 then. For the last few releases I've been frequently checking for the
 existence of the torrents before and after release, anticipating problems
 (especially for Alpha and Beta) and have still never been able to report
 them soon enough for anyone to be willing to fix them. There's no chance
 that someone just randomly noticing could do it soon enough. I'd be happy
 to check several hours before release assuming the torrents are guaranteed
 to exist at that time. The 16 FEL Spin wasn't available until after
 release, though (Dec. 1) so it still wouldn't be possible to fix in such
 cases. There's also the problem that if a mistake is noticed before
 release, the new .torrent might not be posted until after release, or with
 not enough time to test it, making it impossible to fix possible mistakes
 in that.

 Personally I still think it's a bad idea for the .torrent files to be
 publicly available in the usual location before they've been verified, for
 the above reasons, but a formal window would help.

 It should also be formalized that before release, it's permissible to
 change the .torrent files. Most people currently seem to think it's never
 okay to do this, so there should be something to point them to.

-- 
Ticket URL: <https://fedorahosted.org/fedora-qa/ticket/237#comment:11>
Fedora QA <http://fedorahosted.org/fedora-qa>
Fedora Quality Assurance