3 ms·
Sounds like a good reason to switch to "everything must be signed"
by rmc 14y ago
Sounds like a good reason to switch to "everything must be signed"
- ikawe 14y agoJust to reiterate the parent: This is only valuable if we trust the signatures - which I wouldn't if they were, say, just held along side the "hacked" gems server.
- rmc 14y agoI'm talking g about developers signing the archive on their local machine. Private key would be stored on developers laptop
- Xylakant 14y agoYou still need the public key to validate the signature. If the attacker can change the public key, he can change the signature without you knowing - unless you explicitly want to trust each and every key for every gem you install.