3 ms·
As greysonp points out, yes; Signal has had reproducible builds since March 2016. So we can prove that those published binaries do not have backdoors insofar as
by jblwps 7y ago
As greysonp points out, yes; Signal has had reproducible builds since March 2016. So we can prove that those published binaries do not have backdoors insofar as we can prove that the corresponding source code does not have backdoors.
- mechnesium 7y agoIf you didn’t create the binary yourself how can you trust it?
- jblwps 7y agoBecause you can reproduce that binary bit-for-bit to confirm its corresponding source code. That's the point of a reproducible build. https://en.wikipedia.org/wiki/Reproducible_builds https://en.wikipedia.org/wiki/Reproducible_builds