https://wptavern.com/new-plugin-makes-wordpress-core-updates-more-secure-by-requiring-cryptographic-signature-verification
New Plugin Makes WordPress Core Updates More Secure by Requiring Cryptographic Signature Verification