# Securing RubyGems with TUF, Part 2

DevFeed: [Securing RubyGems with TUF, Part 2](<https://devfeed.tech/articles/securing-rubygems-with-tuf-part-2-15841.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/securing-rubygems-with-tuf-part-2>)

Author: Square Engineering

Published: 2013-12-09T17:05:00Z

Content type: tutorial

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [rubygems](<https://devfeed.tech/topics/rubygems.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>)

Tags: [delegation](<https://devfeed.tech/tags/delegation.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [offline](<https://devfeed.tech/tags/offline.md>), [private-key](<https://devfeed.tech/tags/private-key.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [rubygems](<https://devfeed.tech/tags/rubygems.md>), [server](<https://devfeed.tech/tags/server.md>), [uploads](<https://devfeed.tech/tags/uploads.md>)

## AI overview

This second article in a series explains how applying The Update Framework (TUF) to RubyGems can let developers securely update their own gems. Developers sign gem metadata with private keys, while RubyGems maintainers use offline keys during delegation and verification steps.

## Source excerpt

Applying The Update Framework (TUF) to RubyGems to secure it against nefarious activity.