[f2f]

You can't avoid trusting trust. "Ken was here" :)

[sanxiyn]

You actually can. Proof here: http://www.dwheeler.com/trusting-trust/

[f2f]

I was alluding to Ken being the author of the old, as well as one of the authors of the new compiler. In jest :)

[cperciva]

You can. You just have to bootstrap all the way up.

[fugyk]

What if any intermediate version is found to contain the violation of trusting trust? Every go maintainer has to build every version sequentially from that version to current version.