Issue #6136 has been updated by mame (Yusuke Endoh). Status changed from Open to Feedback I'm not sure if I understand your problem correctly. I guess gpg does not work for you. Could you elaborate your situation, and explain how gpg solves your problem? -- Yusuke Endoh <mame / tsg.ne.jp> ---------------------------------------- Feature #6136: Add gpg signatures whenever releasing ruby source tarballs https://bugs.ruby-lang.org/issues/6136#change-25461 Author: td123 (Thomas Dziedzic) Status: Feedback Priority: Normal Assignee: Category: Target version: I was one of the unfortunate people quick enough to grab the buggy version of ruby that contained bug #6040 as announced here: http://www.ruby-lang.org/en/news/2012/02/16/ruby-1-9-3-p125-is-released/ Someone notified me that the md5sums used for our package didn't match. It would be nice to have a gpg sig released with every ruby release so we can be sure it came from you guys without having to worry and search for rerelease notes. -- http://bugs.ruby-lang.org/