you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 6 months ago (1 child)

There are some good points in it, though I wouldn't really consider go dependencies all that decentralized in practice and I don't understand how checksum db will protect against supply chain attacks with stolen credentials, but I admit I haven't looked into the details.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 6 months ago

    Yep you're right, tampering before transmission is still possible. I think I agree with having a strong standard lib helping that considerably. While the language of the blog is not objective, the "content" was better than expected 😊

  • source
  • parent