3 ms·
At least read up on how f-droid does their reproducible build infrastructure before you spread FUD.
by vsviridov 7y ago
At least read up on how f-droid does their reproducible build infrastructure before you spread FUD.
- h4waii 7y agoWhat about my comment is FUD? Regardless of the fact that builds are reproducible, F-Droid has infrastructure. How is that infra secured? How are the servers that store signing keys secured? How are the build servers accessed? How is the access secured? Okay, so the builds are reproducible -- is someone maintaining a concurrent system that verifies reproducibility and provides notification of a collision when things don't match up with built and served binaries?