3 ms·
If you don’t want to use the proxy you can turn it off, trivially. M For the overwhelming majority of users the proxy is a huge benefit (installing and updating
by enneff 6y ago
If you don’t want to use the proxy you can turn it off, trivially. M For the overwhelming majority of users the proxy is a huge benefit (installing and updating dependencies is way faster and the checksum database provides security benefits).
Note that most other packaging ecosystems use centralised services, where you don’t even have the option of merely turning off the proxy.
- yencabulator 6y agoI know you know this, but gosumdb and goproxy are two very different entities, consumed separately. Let's not muddy conversations about the default centralized goproxy with the existence of a global TOFU service. gosumdb would be perfectly possible to query without even revealing a module import path you're asking for (just like browser-side safe browsing can do).