grant-olson/rubygems-openpgp
View on GitHub ↗ ★ 32 Ruby
This allows you to cryptographically sign ruby gems, so that a user can later verify that they've downloaded a copy that hasn't been tampered with or hacked.
3 mentions on Hacker News by 2 people: 0 stories, 3 comments · first 2013-01-30 · latest 2013-03-04
20082026
-
The next release of rubygems-openpgp, due out in a week or two, will do everything you want: https://github.com/grant-olson/rubygems-openpgp/issues/15
comment by kgo · 2013-03-04 · in A Practical Guide to Using Signed Ruby Gems - Part 1: Bundler -
…people have been asking how to secure RubyGems.org and this short video shows one possibility. [1] https://github.com/grant-olson/rubygems-openpgp
comment by Corrado · 2013-02-11 · in Digital Signatures, Authentication, and rubygems-openpgp [video] -
…gems and wrote some proof-of-concept code so there could be a proper Web-of-Trust for rubygems: https://github.com/grant-olson/rubygems-openpgp But the developers were resistant (and understandably so) to having gpg as a dependency for gem…
comment by kgo · 2013-01-30 · in Rubygems.org compromised