On Wed, Jan 8, 2025 at 4:19 PM Jeffery Carr <basilarc...@gmail.com> wrote: > > We can 'git clone' anything into the namespace at compile time.
But you can only do that if the git repository is still available. > I assumed the proxy system was intended to make things elegant, fast and > simple, not so much some magic super ultra security system that trumps PGP > signed git repositories. The proxy system was intended to make sure that builds that succeeded in the past could be recreated in the future. See https://go.dev/desidesign/25530-sumdbgn/25530-sumdb. Yes, a consequence of a secure module proxy is that module names can't be reused. Fortunately, the set of module names is unbounded, and the only part that matters much for Go programs is the final path element. Ian -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/golang-nuts/CAOyqgcXjBh7HgWCGyMtXU%3Dcd12XQURcmRdE56DqPbyTTYD0PKA%40mail.gmail.com.
