Description
words.filippo.io is the blog of Filippo Valsorda, a cryptography engineer and open-source maintainer who works on Go's cryptography libraries through Geomys. He writes about cryptography, Go and the practice of maintaining open source. Go-specific posts include The 2025 Go Cryptography State of the Union, go.sum Is Not a Lockfile, Inspecting the Source of Go Modules and a proposal for a passkey API in Go. Other recent posts cover quantum computing timelines from a cryptography engineer's perspective, Turn Dependabot Off and Vulnerability Reports Are Not Special Anymore. Worth following for Go developers who care about security, dependencies and how the standard library's crypto packages evolve.
