@harding : Definitely! If you like, you can run `bundle install --trust-policy HighSecurity` on your local system, which will restrict `gem` to only installing gems that are cryptographically signed. Unfortunately for you, not all gem developers sign their gems, so you'll have to appeal to the developers of `RedCloth`, `ffi-icu`, etc. to begin signing their gems with widely available public keys.

Lack of `https` was an oversight. Fixed!