I don't know if you're joking, or if the people downvoting you think that your idea isn't worth hearing, but it's actually a good idea (if we can look past our

I don't know if you're joking, or if the people downvoting you think that your idea isn't worth hearing, but it's actually a good idea (if we can look past our snobbishness about how over-hyped blockchain technology has become). Part of the threat model around malicious software updates requires that we implement reproducible builds and store the hashes of builds in a distributed permissionless append-only database. There are proposals like EthIKS: http://www.jbonneau.com/doc/B16b-BITCOIN-ethiks.pdf http://www.jbonneau.com/doc/B16b-BITCOIN-ethiks.pdf which implements public key transparency in the Ethereum blockchain, using smart contracts, and there are ideas for implementing the gossip feature of certificate transparency logs using blockchains: https://blog.okturtles.org/2015/03/certificate-transparency-on-blockchains/ https://blog.okturtles.org/2015/03/certificate-transparency-... Binary transparency can be thought of as just a special case of certificate transparency: https://wiki.mozilla.org/Security/Binary_Transparency https://wiki.mozilla.org/Security/Binary_Transparency