2 ms·
Is anyone aware of any third-party project which attempts to audit sum.golang.org (and/or sum.golang.google.cn)? Its design is similar to that of certificate t
by dpifke 6y ago
Is anyone aware of any third-party project which attempts to audit sum.golang.org (and/or sum.golang.google.cn)?
Its design is similar to that of certificate transparency, in that changes or deletions (e.g. DMCA takedowns or FISA warrants) are supposed to be detectable; see:
https://go.googlesource.com/proposal/+/master/design/25530-sumdb.md https://go.googlesource.com/proposal/+/master/design/25530-s...
I'm curious if anyone has actually tried to audit it.