4 ms·
If you have reproducible builds and you can verify the digest of the app on your phone, difference is like night and day in open-source vs. closed-source projec
by nicce 4y ago
If you have reproducible builds and you can verify the digest of the app on your phone, difference is like night and day in open-source vs. closed-source projects.
- lxgr 4y agoBut you can’t have reproducible builds at least in the App Store.
- nicce 4y agoApple can implement to show pre-encrypt hash if they want. I cannot see anything negative impact for them if we just give some pressure.
- lxgr 4y agoOh, don't get me wrong, I think it would be phenomenal if Apple were to allow reproducible builds on the App Store! But given both the existing encryption as you mention, and Bitcode (mandatory for at least the Apple Watch for now), I think it's unfortunately pretty unlikely to happen.