3 ms·

I've never programmed for an app store -- what's the security measure that ensures the Signal version you install corresponds to some trusted state of the code

• pcl 8y ago
  No such security measures exist in the iOS or Android app stores. I’m not sure whether or not a publisher could opt into providing such assurances, either. You could imagine that with a deterministic build regime, something might be possible, at least if you had rooted your phone so you could directly inspect the install footprint.
• Joeboy 8y ago
  Signal has reproducible builds, which means you can build it from source yourself and confirm that the result is exactly the same as what you got from the app store. Obviously not many people actually do that, but it means google can't start pushing bad versions without a significant risk of getting caught.