[wp-trac] [WordPress Trac] #60871: Sign releases (PGP, GPG)

WordPress Trac noreply at wordpress.org
Sun Mar 31 19:18:49 UTC 2024


#60871: Sign releases (PGP, GPG)
--------------------------+------------------------------
 Reporter:  maltfield     |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by maltfield):

 To see how this was implemented in a similar open source project, consider
 MediaWiki:

  * https://www.mediawiki.org/wiki/Download#Signature_downloads

 The download page for MediaWiki (see above) has a section titled
 "Signature downloads" which
 1. Has a link for downloading the cryptographic signature of the latest
 release
 1. Has a link for downloading the public keys that are used to sign the
 releases

 This is not an ideal example, but it is a bare minimum that would satisfy
 this ticket.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/60871#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list