4 ms·

Unsigned tarballs: Security fail.

• ddebernardy 13y ago
  See here: http://www.ruby-lang.org/en/news/2013/12/25/ruby-2-1-0-is-released/ http://www.ruby-lang.org/en/news/2013/12/25/ruby-2-1-0-is-re...
  • ballard 13y ago
    That's md5 and sha256 hashes, not a gpg signature. There's a world of difference when something is unsigned because it's impossible to prove that it was what the developer(s) signed off to release.