[wp-meta] [Making WordPress.org] #7574: Sign releases (PGP, GPG)

[Making WordPress.org]

#7574: Sign releases (PGP, GPG)
--------------------------------+--------------------------------
 Reporter:  maltfield           |       Owner:  (none)
     Type:  defect (bug)        |      Status:  closed
 Priority:  normal              |   Milestone:
Component:  WordPress.org Site  |  Resolution:  reported-upstream
 Keywords:                      |
--------------------------------+--------------------------------
Changes (by dd32):

 * status:  new => closed
 * resolution:   => reported-upstream


Comment:

 Hi @maltfield,

 I apologise for the runaround you've had with reporting this.

 This ticket is the centralised ticket for signing of WordPress.org
 packages:
 https://core.trac.wordpress.org/ticket/39309

 The implementation work 5 years ago stalled due to technical limitations
 in the chosen direction (which were determined after initial
 implementation) and lack of a good solution at the time for the needs of
 WordPress (PGP and similar tools that are widely used by other platforms
 did not meet our needs).

 To be blunt: We won't be implementing signing of releases, without that
 core support being present. The discussion of this can continue on the
 core ticket.

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/7574#comment:6>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org