docs: add article covering asset signature verification (#268)

* docs: add article covering asset signature verification

* Apply suggestions from code review

Co-authored-by: Matt Holt <mholt@users.noreply.github.com>

* add details around the need for artifact signature validation and the meaning of verification failure

Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
This commit is contained in:
Mohammed Al Sahaf 2022-10-23 08:47:49 +03:00 committed by GitHub
parent e0b7d2bd37
commit 6e6875f65a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 236 additions and 0 deletions

View file

@ -37,6 +37,7 @@ Our [official packages](https://github.com/caddyserver/dist) come only with the
1. Obtain a Caddy binary:
- [from releases on GitHub](https://github.com/caddyserver/caddy/releases) (expand "Assets")
- Refer to [Verifying Asset Signatures](/docs/signature-verification) for how to verify the asset signature
- [from our download page](/download)
- [by building from source](/docs/build) (either with `go` or `xcaddy`)
2. [Install Caddy as a system service.](/docs/running#manual-installation) This is strongly recommended, especially for production servers.