Signed Updates

[bembelimen]

Is your feature request related to a problem? Please describe.

Currently Joomla! Updates are not secured by signatures. Signing Update would ensure the legitimacy of the installed update.

Describe the solution you'd like

We plan to implement The Update Framework (TUF), a heavy security improvement by delivering signed updates to make sure that no contaminated version of Joomla! and its extensions is installed.

Additional context

https://theupdateframework.io/

This Issue is a reminder for Joomla! 4.1: https://www.joomla.org/announcements/release-news/5819-the-day-after-joomla-4-0-planning-the-future.html