On: Code.google.com was shut down, Go packaging is bro...

[pixl97]

Yea, if someone at a nation state level manage to fake a cert and redirect BGP, I'm sure they could affect a huge number of systems pretty quickly. Do git clients even do a good job of SSL verification?

[ihsw → pixl97]

China briefly blocked GitHub (for whatever reason) and the tech establishment screamed bloody murder.

I cannot even begin to imagine how it would react to it being MITM'd.

[y4mi → pixl97]

afaik git doesnt do ssl verification.

its supposedly being handled by either ssh or libcurl

or are you talking about these frontends like source tree, smartgit, ... ?