Comment by direwolf20
2 days ago
Or allows Google to override security. They could also trust a certificate here, maybe one owned by the regime.
2 days ago
Or allows Google to override security. They could also trust a certificate here, maybe one owned by the regime.
There are links to pretty readable changesets, so you can go read and understand exactly what's happening instead of speculating.
How would that even make any sense for an open source project that people expect goodwill from?
Why expect goodwill from Google?
you both pin your compiler version, and your binaries are compiled so it only affects going forwards