months ago wrote a comment on the post ssl for auto updates, on the site make wordpress core: point of order: i would highly recommend keeping the signatures in place for core updates.... months ago wrote a comment on the post security in , on the site make wordpress core: they're morally equivalent....