[wp-trac] [WordPress Trac] #54495: The authenticity could not be verified as no signature was found when downloading WordPress 5.8.2

[WordPress Trac]

#54495: The authenticity could not be verified as no signature was found when
downloading WordPress 5.8.2
-----------------------------+----------------------
 Reporter:  henry.wright     |       Owner:  (none)
     Type:  defect (bug)     |      Status:  closed
 Priority:  normal           |   Milestone:
Component:  Upgrade/Install  |     Version:  5.2
 Severity:  normal           |  Resolution:  invalid
 Keywords:                   |     Focuses:
-----------------------------+----------------------
Changes (by desrosj):

 * status:  new => closed
 * version:   => 5.2
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Hi @henrywright,

 This is actually intended behavior. [44954] added an experimental way to
 cryptographically sign WordPress updates as an extra level of security
 when updating plugins and themes. Because this was an experiment,
 signature verification was introduced as a "soft" requirement.

 Because this has not been finalized, a signature is currently not
 returned, and that's the reason for the messages you are seeing.

 You can read more about this in the tickets linked below, and the related
 [https://make.wordpress.org/core/2019/05/17/security-in-5-2/ developer
 note that was published when this change was originally made].

 Related: #39309, #45806, #49200.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/54495#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform