3 ms·
Ok. But what kind of magic signature do you want to know that the code you're running matches the source, if the software is closed source and you have no acce
by bombolo 4y ago
Ok.
But what kind of magic signature do you want to know that the code you're running matches the source, if the software is closed source and you have no access to the source?
Your requirement makes no sense. Are you a product manager? :D
- a_vanderbilt 4y agoRe-read my initial reply to the thread. It is stated.
- bombolo 4y agogpg can be used to sign a single file, if for any reason you download a single .deb instead of using a repository. If your supplier doesn't sign them… take it with them?