Simplifying my last statement
1. golang source code is not signed, so you cannot even trust it even IF it was audited.
2. You cannot compile the golang compiler. It is the same as closed source as a result. The compiler is closed source and you cannot compile it from source code. I doubt anyone else even tried.
Login to reply
Replies (2)
The source is signed. The compiler is a binary, yes. But trusting it is naivety. You can't verify the bits against the code. Without a provable trust anchor, you’re just doing blind faith in Silicon Valley’s black box.
That’s a stretch. Go is written in Go and compiles from source just fine. Cutting your food into smaller pieces doesn’t change its nutrient profile.