[wp-trac] [WordPress Trac] #60871: Sign releases (PGP, GPG)
WordPress Trac
noreply at wordpress.org
Sun Mar 31 19:18:49 UTC 2024
#60871: Sign releases (PGP, GPG)
--------------------------+------------------------------
Reporter: maltfield | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version:
Severity: normal | Resolution:
Keywords: | Focuses:
--------------------------+------------------------------
Comment (by maltfield):
To see how this was implemented in a similar open source project, consider
MediaWiki:
* https://www.mediawiki.org/wiki/Download#Signature_downloads
The download page for MediaWiki (see above) has a section titled
"Signature downloads" which
1. Has a link for downloading the cryptographic signature of the latest
release
1. Has a link for downloading the public keys that are used to sign the
releases
This is not an ideal example, but it is a bare minimum that would satisfy
this ticket.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/60871#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list