go-omg is an HTTP client and a parser of files specified in Onion Mirror Guidelines. See spec.txt.
- download and validate
/mirrors.txt
- download and validate
/canary.txt
- download and validate
/related.txt
The package intentionally doesn't implement a method to download PGP keys from /pgp.txt
.
This is to save people from dangerous assumption that verifying signed messages with a key downloaded
from the same host, protects them from phishing.
In order to verify signed data, you must trust the key first. To do so, it must be obtained from a trusted source.