Verify Cryptographic Authenticity after Downloading Releases (Signatures)
-
How can I verify the authenticity of a wordpress release after downloading it?
I tried to securely download wordpress today, but I didn’t find any information on the page about how I can verify that it’s authentic
My understanding is that wordpress started cryptographically signing their releases in 2019, but I haven’t found any documentation describing how users can verify the authenticity of wordpress releases after downloading it, and the above page doesn’t provide any such information.
How can I verify the authenticity of a wordpress release after downloading it and before installing it?
The page I need help with: [log in to see the link]
-
@sterndata hashes do not provide authenticity checks. They’re for integrity checking (eg corrupt downloads), not security.
I’m asking about signatures, for security. See the ticket linked-to in OP:
- The topic ‘Verify Cryptographic Authenticity after Downloading Releases (Signatures)’ is closed to new replies.