4 ms·
Yes, but the website owner can change its source code at any time, and even serve differently JS for each user, puting the entire responsibility on the user sho
by bisRepetita 4y ago
Yes, but the website owner can change its source code at any time, and even serve differently JS for each user, puting the entire responsibility on the user shoulder to check the code behavior all the time.
It's not as demanding with an open source app with distributed source code and versioning.
So I don't understand the snark, and how it is helpful.
- httpsterio 4y agoSame goes for open source builds, you have to either build it yourself or trust the supplied builds.
- SemanticStrengh 4y agoreproducible builds are a thing but yeah no easy solution out there for binary/code authenticity
- Hallucinaut 4y agoThose aren't really the only two options though, are they? If you don't trust software you can run it air-gapped or in an internet-free sandbox. Moreover good luck trying to verify that everything a website does on the server side is unchanged compared to a binary that's been built locally once.
- pabs3 4y agoIt is also possible to trust anyone who has verified the build is reproducible: https://reproducible-builds.org/ https://reproducible-builds.org/