3 ms·

See Moxie's explanation here: https://github.com/WhisperSystems/Signal-Android/issues/127#issuecomment-13447074 https://github.com/WhisperSystems/Signal-Android

by bradyo 10y ago

See Moxie's explanation here: https://github.com/WhisperSystems/Signal-Android/issues/127#issuecomment-13447074 https://github.com/WhisperSystems/Signal-Android/issues/127#... The whole thread is a good read too haha

kuschku 10y ago
Which is not correct. If F-Droid’s reproducible build system can get the same result as your own build, you can distribute your own, self-signed version through F-Droid. In other words, moxie is wrong. Again.
icebraining 10y ago
Even without reproducible builds, that's as "insecure" as any Linux distro. Frankly, I can very well live with the F-Droid maintainers keeping the signing keys.
- cyphar 10y ago
  And apparently f-droid has reproducible builds now.