[Catalog-sig] RubyGems Threat Model and Requirements

[Donald von Stufft]

The folks on the ruby side of things who are dealing with a lot of
the same problems as Python/PyPI is have put together a document
containing a threat model and requirements of the system. While the
terminology is obviously ruby specific the concepts all apply to us.

The document can be found here: http://goo.gl/ybFIO

Further more since both languages are trying to solve the same problem
it would probably be a really good idea to join forces and hash out a system
and then diverge to actually implement it instead of both languages having
the same conversations in parallel.