[Numpy-discussion] SHA256 mismatch on SourceForge downloads

[Antoine Pitrou]

Hello,

The SourceForge download page for 1.10.0b1 mentions:

 89e467cec774527dd254c1e039801726db1367433053801f0d8bc68deac74009
 numpy-1.10.0b1.tar.gz

But after downloading the file I get:

$ sha256sum numpy-1.10.0b1.tar.gz 
855695405092686264dc8ce7b3f5c939a6cf1a5639833e841a5bb6fb799cd6a8
numpy-1.10.0b1.tar.gz


Also, since SouceForge doesn't provide any HTTPS downloads (it
actually redirects HTTPS to HTTP (*)), this all looks a bit pointless.

(*) seems like SourceForge is becoming a poster child of worst
practices...

Regards

Antoine.