Rest-client gem is hijacked
I think that rubygems should consider automatically enforcing multifactor authentication for popular gems.<p>So any gem with more than 50,000 downloads should force to gem maintainer to have MFA set up before they can publish a new version or do anything with that gem.<p>Because, having MFA is not about protecting gem maintainers, it's about protecting users. So, gem maintainers should not be allowed to be careless with security by not using MFA. It's not their choice to make.