[wp-meta] [Making WordPress.org] #619: Add Content-MD5 headers to downloads

Making WordPress.org noreply at wordpress.org
Mon Dec 4 05:44:02 UTC 2017

#619: Add Content-MD5 headers to downloads
 Reporter:  nacin             |       Owner:
     Type:  enhancement       |      Status:  new
 Priority:  normal            |   Milestone:  Plugin Directory v3 - Future
Component:  Plugin Directory  |  Resolution:
 Keywords:  2nd-opinion       |

Comment (by dd32):

 With the more recent changes made to downloads, this is no longer as easy
 as it previously was.

 ZIPs are now reverse-proxied to a SVN server, and the server responding to
 the request no longer has access to the file to generate the MD5.
 We'd probably have to cache ZIP md5's in the middle somewhere.

 Personally I'm -1 on implementing anything here now, and would instead
 prefer to see the next step after `Content-MD5` being implemented, a
 signed hash of the zip instead.

Ticket URL: <https://meta.trac.wordpress.org/ticket/619#comment:21>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org

More information about the wp-meta mailing list