[wp-trac] [WordPress Trac] #60871: Sign releases (PGP, GPG)

WordPress Trac noreply at wordpress.org
Thu Apr 11 08:15:07 UTC 2024


#60871: Sign releases (PGP, GPG)
--------------------------+------------------------------
 Reporter:  maltfield     |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:
--------------------------+------------------------------
Changes (by chesio):

 * status:  new => closed
 * resolution:   => invalid


Comment:

 @maltfield I see now. When reading your request I got immediately reminded
 about that old issue and consequently I misunderstood what you actually
 request here.

 As far as I can tell, WordPress.org already offers MD5 and SHA1 hashes for
 verification of downloaded archive files - see:
 https://wordpress.org/download/releases/

 If you would like to have cryptographic signatures available as well, then
 you should raise your concerns in Trac repository for WordPress.org (the
 website): https://meta.trac.wordpress.org/ This Trac repository is for
 WordPress core (the software).

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/60871#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list