mailwal

Go 1.27.3 and 1.26.10 ship, x509 distrusts compromised intermediates

GoDaily
🐿️ GoDaily - October 22, 2026

The point releases of Go 1.27.3 and 1.26.10 are out, carrying a crypto/x509 change that distrusts a set of compromised intermediate certificates. That matters most on platforms where the system trust store does not get updated for you, so anyone shipping Go binaries to appliances or minimal containers should pull the update rather than wait. Elsewhere, a proposal to add offline UPKI revocation checking to crypto/tls is open for discussion, and an accepted testing proposal will finally surface non-zero exit status in -json output, which should save a few confused afternoons.

Accepted Proposals 1
GitHub
I have the following test file sample test.go : go package main im
Proposals 1
GitHub
Proposal Details This proposal describes adding a default-on, offline server certificate revocation checking mechanism to crypto/tls using a local cac
Discussions 5
Mastodon
Lock down your website to a dedicated few browsers using mTLS. In this video I show how mTLS works, how you create your own CA and chain of trust and how you write your own mTLS server in Go. Everythi
Golang Nuts
Hello everyone, I would like to share an experimental Slint binding for Go: https://github.com/kanryu/slint For a long time, Go has not had a clear, definitive GUI binding that provides a modern, cros
Golang Nuts
Hello fellow Go users and developers! The "passing pointers" section in cgo docs < https://pkg.go.dev/cmd/cgo hdr-Passing pointers > mention the following: reachable from these function arguments must
Events 1
Meetup
Join Utah Go User Group @ Lehi, US on Tue Nov 3
Articles 5
Medium
The underrated tools that solve real problems without adding unnecessary complexity Continue reading on CodeX »
Medium
One four-line list, six languages, and the gotchas nobody mentions: leading zeros that compare as equal, prices and negative numbers that… Continue reading on Medium »
Medium
How we rewrote our backend in Go around one service template, and ended up with 4× less CPU, 12× less memory and a team of fewer than five… Continue reading on Zoop Engineering »
Medium
Monitoring sounds like a straightforward problem. Continue reading on Medium »
Videos 5
YouTube
Gregor Zunic posted that they're migrating their backend from Python to Go: "completely impossible 3 years ago. Now it's taking 1 ...
YouTube
We shuffled a digital brain's wiring at random. It fired just as much, but letter recognition dropped from 94% to 56%. BrainCore is a ...
YouTube
Provided to YouTube by Romora Record Golang · Trio Lamtama Golang ℗ 2020 Romora Record Released on: 2020-10-07 ...
YouTube
Memos lets you jot down thoughts in Markdown, add images, and later find them by search, tags, or scrolling any day.
YouTube
Learn Go programming from scratch! In this first lesson, discover what Go (Golang) is, why developers use it, and how it powers ...
Trending 1
GitHub Trending
Datadog Go Library including APM tracing, profiling, and security monitoring.
Security 1
Go Vulnerabilities
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of
Social 2
Bluesky
The 2026 Go Developer Survey is open! Help set Go’s priorities for next year by telling us how you use Go and where it could be better. ⏱️ 10–20 minutes 📅 Open through November 3 blink.qual
Bluesky
added support for AppImage and OpenBSD packages to rockhopper. seeking a real life devops role. linux unix dev golang rust
Enjoying this issue? Share it →