Comment by craftkiller

I already barely touch the cache because I rebuild all my software with zen4 optimizations but this article has convinced me to go all-the-way and disable the upstream nix cache completely. Even if it doesn't save me from a hypothetical cache poisoning attack that may never happen, I'll barely notice the change anyway since I'm already compiling all of my software, and it'll put less strain/cost on the nix cache servers.