2 ms·
Reproducible builds allows for better auditing which makes it more difficult for malicious maintainers to plug backdoors into systems. What's the relevance of
by aflag 8y ago
Reproducible builds allows for better auditing which makes it more difficult for malicious maintainers to plug backdoors into systems.
What's the relevance of knowing when something was built if you can check the source version and rebuild it yourself in the exact same way? If the build is reproducible it's merely a cache. You could potentially recompile it every time you try to execute the command and you'd get the exact same thing.