diff --git a/tpm2-abrmd-1.1.0.tar.gz b/tpm2-abrmd-1.1.0.tar.gz
index 14d3b0e..0f319c0 100644
--- a/tpm2-abrmd-1.1.0.tar.gz
+++ b/tpm2-abrmd-1.1.0.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:aa5169f85bf36754d6ade6f729211cfd1ba9645c629906085e8da2b166c54909
-size 487889
+oid sha256:06d7c3f4cdade756515cb130b7e67ebbcbc9c4a283601307908400b6ea9ce3a0
+size 151233
diff --git a/tpm2.0-abrmd.spec b/tpm2.0-abrmd.spec
index 2ca979c..e20c9bc 100644
--- a/tpm2.0-abrmd.spec
+++ b/tpm2.0-abrmd.spec
@@ -23,7 +23,7 @@ Summary:        Intel's TCG Software Stack Access Broker & Resource Manager for
 License:        BSD-2-Clause
 Group:          Productivity/Security
 Url:            https://github.com/01org/tpm2-abrmd
-Source0:        https://github.com/01org/tpm2-abrmd/releases/download/%{version}/tpm2-abrmd-%{version}.tar.gz
+Source0:        https://github.com/01org/tpm2-abrmd/archive/%{version}.tar.gz
 BuildRequires:  autoconf-archive
 BuildRequires:  automake
 BuildRequires:  gcc-c++
@@ -68,6 +68,11 @@ use with the SAPI library (libsapi) like any other TCTI.
 # %%patch0 -p1
 
 %build
+# TODO: we shouldn't bootstrap, but there is currently upstream issue #102
+# we are using the source tarball which doesn't ship generated configure
+# scripts, but it ships README and LICENSE files which are missing from the
+# distribution tarball. When we get an updated distribution tarball we should
+# remove the bootstrap and switch to the distribution tarball.
 bash bootstrap
 export CFLAGS="%optflags -fPIE"
 export LDFLAGS="-pie -fPIE"