3 ms·
What bothers me most about it is the lack of a checksum, which is something Go modules support. I think that’s a mandatory feature to prevent certain attack vec
by christophilus 8y ago
What bothers me most about it is the lack of a checksum, which is something Go modules support. I think that’s a mandatory feature to prevent certain attack vectors. Other than that, I have no problem with this approach.
- piscisaureus 8y agoPackage validation (using a checksum or signature) is definitely on our radar. We just haven't gotten around to it yet.