[wp-meta] [Making WordPress.org] #7574: Sign releases (PGP, GPG)

[Making WordPress.org]

#7574: Sign releases (PGP, GPG)
--------------------------------+---------------------
 Reporter:  maltfield           |       Owner:  (none)
     Type:  defect (bug)        |      Status:  new
 Priority:  normal              |   Milestone:
Component:  WordPress.org Site  |  Resolution:
 Keywords:                      |
--------------------------------+---------------------

Comment (by maltfield):

 To see how this was implemented in a similar open source project, consider
 MediaWiki:

  * https://www.mediawiki.org/wiki/Download#Signature_downloads

 The download page for MediaWiki (see above) has a section titled
 "Signature downloads" which

 1. Has a link for downloading the cryptographic signature of the latest
 release
 1. Has a link for downloading the public keys that are used to sign the
 releases

 This is not an ideal example, but it is a bare minimum that would satisfy
 this ticket.

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/7574#comment:3>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org