← Back to all articles

Filippo Valsorda

Cryptography engineer. Go security team member. Maintainer of age encryption and other crypto tools.

https://words.filippo.io

Articles

go.sum Is Not a Lockfile

Go's go.mod serves as both manifest and lockfile; go.sum is not a lockfile and doesn't need to be checked.

Building a Transparent Keyserver

A guide to building a transparent keyserver in under 500 lines of code, featuring privacy protections, anti-poisoning measures, and witness cosigning.

The Geomys Standard of Care

Geomys introduces standards that its maintainers follow for open source project maintenance and professional activity.