Hacker News Reader

Go has a thing for that now- everything goes through a proxy (https://proxy.golang.org), and if you set GO_PROXY, you can send it through your proxy (Nexus et al).

View on HN

I don't know for Go case how it would work, but what I saw in case of Maven is it's company wide blocked and you have to get your packages through Sonatype Nexus - and Nexus either has it's own packages or it has a proxy for Maven packages. So I wonder in case of Go, if it would be unfeasible to block GitHub so they would just block the entire use of the language in company developed software.

exactly. If you block go packages via firewall IT rules, you block github.com software engineering work. It's the one thing I think that's holding Golang back. Deno as well. I know it looks novel but it's a security nightmare.

Blocking the official Google Go proxy will work pretty well, go get will just fail by default.

If someone works around that on a developer machine, it shouldn't matter, because release builds should still come from an automated system, right?

yeah, go modules have streamlined golang development so much. Providing a custom domain configuration on your site allows go to grab the code vs a user visiting it in their browser.

Reply on news.ycombinator.com