Re:Pkg.go.dev is more concerned with Google's interests than...
by dpifke on Saturday August 01, 2020 @04:06PM
(#24023473)
Is anyone aware of any third-party project which attempts to audit sum.golang.org (and/or sum.golang.google.cn)?
Its design is similar to that of certificate transparency, in that changes or deletions (e.g. DMCA takedowns or FISA warrants) are supposed to be detectable; see:
Its design is similar to that of certificate transparency, in that changes or deletions (e.g. DMCA takedowns or FISA warrants) are supposed to be detectable; see:
https://go.googlesource.com/proposal/+/master/design/25530-s...
I'm curious if anyone has actually tried to audit it.