@wplid on WordPress.org
Created ticket #18577 on Core Trac:Updates and downloads should be signed or delivered securely