[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

2019-05-31 Thread Amnon Baron Cohen
Not really. You need the list feature of GOPROXY, which is only available in 1.13 (or tip). > > Is there a way to test proxy.golang.org with go1.12 if we have private > dependencies ? > > -- > William Dodé > > -- You received this message because you are subscribed to the Google Groups "

[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

2019-05-31 Thread wilk
On 31-05-2019, Amnon Baron Cohen wrote: > --=_Part_967_922323128.1559316498912 > Content-Type: multipart/alternative; > boundary="=_Part_968_1050003518.1559316498912" > > --=_Part_968_1050003518.1559316498912 > Content-Type: text/plain; charset="UTF-8" > Content-Transfer-Encoding

[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

2019-05-31 Thread Amnon Baron Cohen
See https://go.googlesource.com/proposal/+/master/design/25530-sumdb.md The current behavior is not ideal from a security point of view. So it is good that 1.13 is fixing this. And unless the fix is default, most users will not get the benefit. Anyone who wants to old behavior just needs to set t

[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

2019-05-31 Thread wilk
On 30-05-2019, Katie Hockman wrote: > The module mirror at proxy.golang.org serves the go command=E2=80=99s proxy > protocol. The Go 1.13 development tree uses this mirror for all module > downloads by default. See the go command documentation at tip >