# Securing RubyGems with TUF, Part 1

DevFeed: [Securing RubyGems with TUF, Part 1](<https://devfeed.tech/articles/securing-rubygems-with-tuf-part-1-15840.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/securing-rubygems-with-tuf-part-1>)

Author: Square Engineering

Published: 2013-12-06T17:05:00Z

Content type: tutorial

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [rubygems](<https://devfeed.tech/topics/rubygems.md>), [Security](<https://devfeed.tech/topics/security.md>), [client](<https://devfeed.tech/topics/client.md>)

Tags: [code](<https://devfeed.tech/tags/code.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [rubygems](<https://devfeed.tech/tags/rubygems.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>)

## AI overview

This first part of a series explains how The Update Framework (TUF) can secure RubyGems against malicious changes to files served after a server compromise. It introduces metadata containing file digests and explains how offline, online, and developer keys are used to sign and verify that metadata.

## Source excerpt

Applying The Update Framework (TUF) to RubyGems to secure it against nefarious activity.