Write blog posts about having security in the official release of cabal

[edsko]

... and mention that enabling security is also a way of enabling mirroring.

(If the nix stuff makes it in before the next release, that obviously deserves a blog post as well.)

[hvr]

(If the nix stuff makes it in before the next release, that obviously deserves a blog post as well.)

See haskell/cabal#3316 for that :-)

[hvr]

I think this one is the closest we got to address this issue:

https://www.well-typed.com/blog/2016/09/hackage-reliability-via-mirroring/

For the record,

• cabal 1.24 shipped with optional/experimental opt-in support, while
• cabal 2.0 was the first release to fully embrace hackage-security by default