Signed gems verify against the author's certificate before install using a .gem.asc file. The catch: a git-sourced line in your Gemfile skips that check entirely. Import trusted certs with gem cert --add. go.fastruby.io/b9j #RubyGems #RubySecurity

0 likes 1 replies