↳
In-reply-to
»
@prologic From Russ Cox: "note that if you set GOPROXY=direct, the go command still uses the checksum database to protect against supply chain attacks. If you really want the go command not to use servers, you also need to set GOSUMDB=off."
⤋ Read More
@prologic@twtxt.net What info do they get via GOPROXY but not get through GOSUMDB? They’d get obviously your IP/connection plus all of the packages you are using, no?