[wordpress插件] DGXPCODGXPCO

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates.

DGXPCO（明确许可的核心运营的数字保证）是用于WordPress软件更新的概念验证密码签名验证实用程序。

The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.

该插件将为WordPress核心更新提供手动（脱机）签名，并阻止应用程序更新，除非使用远程签名验证了更新有效负载的内容。

This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server.

除了WordPress更新服务器的标头中提供的MD5内容哈希值之外，这还为WordPress更新的完整性提供了 second 真理来源。

If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached.

如果该服务器曾遭到破坏，则托管文件签名的服务器不太可能也遭到破坏。

If the signatures ever fail to validate, you can know your site was protected from an attack.

如果签名无法通过验证，则可以知道您的站点已受到保护，免受攻击。