[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

[Amnon Baron Cohen]

Not really. 
You need the list feature of GOPROXY, which is only available in 1.13 (or 
tip).


>
> Is there a way to test proxy.golang.org with go1.12 if we have private 
> dependencies ? 
>
> -- 
> William Dodé 
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/c0240271-d1f3-43d7-a12f-0fc772ded6b0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

[wilk]

On 31-05-2019, Amnon Baron Cohen wrote:
> --=_Part_967_922323128.1559316498912
> Content-Type: multipart/alternative; 
>   boundary="=_Part_968_1050003518.1559316498912"
>
> --=_Part_968_1050003518.1559316498912
> Content-Type: text/plain; charset="UTF-8"
> Content-Transfer-Encoding: quoted-printable
>
> See https://go.googlesource.com/proposal/+/master/design/25530-sumdb.md
>
> The current behavior is not ideal from a security point of view.
> So it is good that 1.13 is fixing this.
> And unless the fix is default, most users will not get the benefit.

I see, thanks.

Is there a way to test proxy.golang.org with go1.12 if we have private
dependencies ?

-- 
William Dodé

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/qcrl7s%243g0s%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.

[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

[Amnon Baron Cohen]

See https://go.googlesource.com/proposal/+/master/design/25530-sumdb.md

The current behavior is not ideal from a security point of view.
So it is good that 1.13 is fixing this.
And unless the fix is default, most users will not get the benefit.

Anyone who wants to old behavior just needs to set two environment vars.

On Friday, 31 May 2019 14:15:28 UTC+1, wilk wrote:
>
> On 30-05-2019, Katie Hockman wrote: 
>
> > The module mirror at proxy.golang.org serves the go command=E2=80=99s 
> proxy 
> > protocol. The Go 1.13 development tree uses this mirror for all module 
> > downloads by default. See the go command documentation at tip 
> > 
> > for details. To make earlier versions of the go command use it (when in 
> > module mode), set GOPROXY=3Dhttps://proxy.golang.org. 
>
> Could you explain why this option will be default and not opt-in ? 
> It can break current workflow, for example with private repos. 
>
> Thanks 
>
> -- 
> William Dodé 
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/d3c61f54-fff3-46c9-8b8d-275686e2def1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[go-nuts] Re: Go Module Mirror and Checksum Database in Beta!

[wilk]

On 30-05-2019, Katie Hockman wrote:

> The module mirror at proxy.golang.org serves the go command=E2=80=99s proxy
> protocol. The Go 1.13 development tree uses this mirror for all module
> downloads by default. See the go command documentation at tip
>
> for details. To make earlier versions of the go command use it (when in
> module mode), set GOPROXY=3Dhttps://proxy.golang.org.

Could you explain why this option will be default and not opt-in ?
It can break current workflow, for example with private repos.

Thanks

-- 
William Dodé

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/qcr9cj%2464gr%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.