[jshawl]

FWIW signed packages are available out of the box with rubygems: <http://docs.seattlerb.org/rubygems/Gem/Security.html>

[jacques_chester]

Yes, but rarely used -- it's clunky. When I scraped the top 10k gems, < 1% had valid and up-to-date signatures.

[jupp0r]

Notably, signatures are not checked by bundler when installing gems.