[potshot]

RubyGems has a guide: http://docs.rubygems.org/read/chapter/21

[scraplab]

This guide also talks a little more about the trust model behind it, which is interesting.

It sounds like it might be slightly out of date though, as it refers to the author as having just landed the patch, which happened 8 years ago.