add note about signing of releases and commits

krisleech · Jul 2, 2016 · b6fec04 · b6fec04
1 parent 2500385
commit b6fec04
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -335,6 +335,11 @@ ls **/*.rb | entr bundle exec rspec
 
 Please read the [Contributing Guidelines](https://github.com/krisleech/wisper/blob/master/CONTRIBUTING.md).
 
+## Security
+
+* gem releases are [signed](http://guides.rubygems.org/security/) ([public key](https://github.com/krisleech/wisper/blob/master/gem-public_cert.pem))
+* commits are GPG signed ([public key](https://pgp.mit.edu/pks/lookup?op=get&search=0x3ABC74851F7CCC88))
+
 ## License
 
 (The MIT License)