[jchw]

> On macOS we now use the system root store even if there's no cgo, by calling straight into Security.framework with... there's assembly involved, that is all.

I feel like I’m developing an addiction to hacks like this. Ever since I started to gain a more intuitive understanding of calling conventions and C/++ ABI I’ve been doing asm calls into MSVC functions and manually laying out COM vtables in pure Go. It’s powerful as long as you have reasonable assurances the ABI rug won’t be pulled from under you!