Free SSL certificates for Open Source projects https://www.globalsign.com/ssl/ssl-open-source/ … Code Signing, too, pleaaase? Would improve security of signed gems!
-
-
Replying to @nahi
@nahi When signed, trust is end to end, in the other cases I need to trust the server. Compromise of http://rubygems.org hurts much less.2 replies 0 retweets 0 likes
Replying to @_emboss_
@_emboss_ @nahi http://rubygems.org could authz who can sign and add its own signature too, perhaps with a key in a HSM
12:16 PM - 11 Sep 2013
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.