[sesutton]

You could audit the Go source and then use the diverse double compiling technique[0] to verify that the binary you're using corresponds to that source code.

[0] http://www.dwheeler.com/trusting-trust/dissertation/html/whe...

[cperciva]

You mean, audit a large number of independently-written Go compilers?

[indians_pro]

Nicely done. To be fair though, Go is just 6 years old and still evolving.

[cperciva]

Exactly. Which is why I think it's important to keep the option of compiling its compiler from a language which has a large diversity of compilers.

[crawshaw]

I don't believe it has been tried yet, but it seems entirely possible to use gccgo as the bootstrap compiler.