3 ms·
ah yes, sorry. is there a trusted compilation service that uses a distributed agreement mechanism, à la blockchain or DHT for validating some git/svn hash agai
by leeoniya 10y ago
ah yes, sorry.
is there a trusted compilation service that uses a distributed agreement mechanism, à la blockchain or DHT for validating some git/svn hash against a binary.
every downloadable source publishes its own binary hashes but the whole practice is somewhat moot in the event of server compromise, not to mention build reproducability.
- beojan 10y agoYou can compile the code yourself, then you would know the binary matches the source. Of course, you have to trust your compiler and OS, but with a service you would have to trust their compiler and OS.