This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
In Part 1 of this series , I explained why Go offers a module proxy and that it is secured by the gosumdb. In this part, I explain how gosumdb secures the Go proxy. If you want to trust the authorship of code, you would need a direct trust relationship with the code author . In a highly dynamic module ecosystem like Go, this would be infeasible. The assumption that gosumdb makes is, if everyone…
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.