Update some URLs & expand on PGP keys

[exim-website.git] / templates / web / mirrors.xsl

diff --git a/templates/web/mirrors.xsl b/templates/web/mirrors.xsl
index 09881d11b673933df4d34a91d6311b1dc6362917..f1a7d876e15a8754e352e5208afdbcaa4081fb47 100644 (file)
--- a/templates/web/mirrors.xsl
+++ b/templates/web/mirrors.xsl
@@ -1,11 +1,11 @@
 <?xml version="1.0" encoding="UTF-8"?>
 
 <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
-       
+
        <!-- WRAPPER -->
                <xsl:import href="../wrapper.xsl"/>
                <xsl:template match="/"> <xsl:apply-imports/> </xsl:template>
-               
+
                <xsl:variable name="docroot" select="'.'"/>
 
        <!-- Title -->
@@ -29,8 +29,14 @@
                        <!-- General Mirror Info -->
                                <p>
                                        <xsl:text>Exim is available from a number of FTP sites. It may also be supplied on some GNU CDs or with other software distributions. Further information on the binary and OS distributions can be found in the </xsl:text>
-                                       <a href="http://wiki.exim.org/ObtainingExim">Exim Wiki</a>
-                                       <xsl:text>.</xsl:text>
+                                       <a href="https://wiki.exim.org/ObtainingExim">Exim Wiki.</a>
+
+                                       <xsl:text>If the mirrors do not work for you, you can download the tarballs from the </xsl:text>
+                                       <a href="https://downloads.exim.org/exim4/">origin.</a>.
+
+                                       <xsl:text>If we published maintenance releases you can find the tarballs
+                                       in the </xsl:text>
+                                       <a href="https://downloads.exim.org/exim4/fixes/">fixes</a><xsl:text> directory</xsl:text>
                                </p>
 
             <h3>Exim Mirror Sites</h3>
@@ -45,6 +51,20 @@
                </li>
             </ul>
 
+           <h3>Verification of Downloads</h3>
+
+           <p>
+           All published tarballs are cryptographically signed with an OpenPGP implementation (such as GnuPG).
+           The signatures are distributed alongside the tarballs.
+           The signatures are created with keys belonging to the developers.
+           The keys can be found in our
+           <a href="https://downloads.exim.org/Exim-Maintainers-Keyring.asc">maintainers keyring</a>.
+           (Please crosscheck these keys with keys you can find at other sources.)
+           </p>
+           <p>
+           The exim.org domain supports <a href="https://wiki.gnupg.org/WKD">the WKD mechanism</a> for OpenPGP key retrieval.
+           </p>
+
             <h3>Mirroring Exim</h3>
 
             <p>If you are interested in running a mirror for exim, please look at <a href="howto/mirroring.html">Mirroring The Exim Website</a></p>
@@ -54,9 +74,11 @@
 
            <p>If you prefer tracking our commits to the source tree directly via Git:
            <ul>
-               <li> Main Git Repository: <code>git://git.exim.org/exim.git</code></li>
-               <li> Mirror at GitHub <a href="https://github.com/Exim/exim.git">https://github.com/Exim/exim.git</a></li>
+               <li>Main Git Repository: <code>git://git.exim.org/exim.git</code></li>
+               <li>Web interface: <a href="https://git.exim.org/exim.git">https://git.exim.org/exim.git</a></li>
+               <li>Mirror at GitHub <a href="https://github.com/Exim/exim.git">https://github.com/Exim/exim.git</a></li>
            </ul>
+           All releases get a signed Git tag.
            </p>
 
            </xsl:template>