If rubygems would sign the gems themselves it would already be an improvement (and rubygems the library check for it). It would make distribution of the gems to

If rubygems would sign the gems themselves it would already be an improvement (and rubygems the library check for it). It would make distribution of the gems to third-party for mirroring or over http possible.