rmoriz (Roland Moriz)
- Login: rmoriz
- Email: rmoriz@gmail.com
- Registered on: 01/28/2015
- Last sign in: 03/12/2015
Issues
| open | closed | Total | |
|---|---|---|---|
| Assigned issues | 0 | 0 | 0 |
| Reported issues | 1 | 0 | 1 |
Activity
01/28/2015
-
12:07 PM Ruby Feature #10793 (Open): Infrastructure/Release-Management: Sign releases
- Hi,
currently Ruby releases are not cryptographically signed and distributed unencrypted via http. While there are some MD5-hashes on the web-site, it's cumbersome to automate and MD5 is already insecure.
This is a huge security risk...