fwiw Cargo stores its metadata including hashes on Github, and packages on s3. Both are HTTPS; package downloads always verified against SHA
-
-
@wycats should you ever be able to change a SHA? -
-
-
@JordanHawker@weems@wycats exactly. that's how you should do it. hence the "append-only" bit.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.