Hacker News new | ask | show | jobs
by ing33k 2311 days ago
https://golang.org/dl/
1 comments

They have checksum hashes but not crypto verifiable signatures.
$ curl https://dl.google.com/go/go1.13.4.src.tar.gz.asc

  -----BEGIN PGP SIGNATURE-----
  Version: GnuPG v1
  
 
 iQIcBAABCAAGBQJdu22LAAoJEGSUxtaZfCFeXigQAKc6NflWvvbaZ6S7RCVuRNzA
  ...
Nice. Thanks for sharing. I didn't see that documented. Would be great to have it documented.