3 ms·

Maybe for rubygems, not so easy for apt/rpm as they use gpg signing/verification of package indices.

• FooBarWidget 16y ago
  RubyGems also have signing facilities. Most authors don't bother signing however because generating a key is too much trouble.