website: describe default mirror and sumdb behavior on Downloads page
Change-Id: I19b0ac2551d7bae9287361b48eb6e05b9cc71680
Reviewed-on: https://go-review.googlesource.com/c/website/+/181957
Reviewed-by: Andrew Bonventre <andybons@golang.org>
diff --git a/internal/dl/tmpl.go b/internal/dl/tmpl.go
index f83bf0f..54c19f5 100644
--- a/internal/dl/tmpl.go
+++ b/internal/dl/tmpl.go
@@ -133,6 +133,16 @@
information about Go releases.
</p>
+<p>
+ As of Go 1.13, the go command by default downloads and authenticates
+ modules using the Go module mirror and Go checksum database run by Google. See
+ <a href="https://proxy.golang.org/privacy">https://proxy.golang.org/privacy</a>
+ for privacy information about these services and the
+ <a href="/cmd/go/#hdr-Module_downloading_and_verification">go command documentation</a>
+ for configuration details including how to disable the use of these servers or use
+ different ones.
+</p>
+
{{with .Featured}}
<h3 id="featured">Featured downloads</h3>
{{range .}}
