이 플러그인은 최근 3개의 주요 워드프레스 출시와 시험 되지 않았습니다. 워드프레스의 좀 더 최근 버전으로 이용할 때 더 이상 관리되지 않고 지원되지 않고 호환성 문제가 있을 수 있습니다.

DGXPCO

설명

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.

This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.

설치

Manual Installation

  1. Upload the entire /dgxpco directory to the /wp-content/plugins/ directory.
  2. Activate DGXPCO through the ‘Plugins’ menu in WordPress.

FAQ

Installation Instructions

Manual Installation

  1. Upload the entire /dgxpco directory to the /wp-content/plugins/ directory.
  2. Activate DGXPCO through the ‘Plugins’ menu in WordPress.
Who is responsible for the signatures

At the moment, Eric Mann will personally verify and sign every new update payload once it’s released by the core team. The signatures of each core file are hosted in a separate GitHub repository, with every commit signed by Eric’s GPG private key for redundant verification.

후기

이 플러그인에 대한 평가가 없습니다.

기여자 & 개발자

“DGXPCO”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다.

기여자

“DGXPCO”(이)가 1(으)로 번역되었습니다. 기여해 주셔서 번역자님께 감사드립니다.

자국어로 “DGXPCO”(을)를 번역하세요.

개발에 관심이 있으십니까?

코드 탐색하기는, SVN 저장소를 확인하시거나, 개발 기록RSS로 구독하세요.

변경이력

1.2.0

  • Filter the upgrade cache to avoid prompting core upgrades with missing signatures.

1.1.0

  • Introduce integration test for full core compatibility guarantees.

1.0.0

  • First release