Why RubyGems needs to enforce gem signing | Hacker News Reader