2 ms·
> nothing stops people with enough privileges from modifying that cached version They may be able to modify it but with some kind of trusted hash at least I'll
by reggieband 9y ago
> nothing stops people with enough privileges from modifying that cached version
They may be able to modify it but with some kind of trusted hash at least I'll know about it. Making a change to a repo that keeps the same version and also keeps the same hash is a more difficult attack to pull off.
- sseth 9y agoPlease see : https://research.swtch.com/vgo-repro https://research.swtch.com/vgo-repro - reproducible, verifiable builds. The same thing is possible in vgo, with planned support for hashes.