3 ms·
There are a ton of different download options https://ops.city/downloads https://ops.city/downloads (versus just compiling from source yourself if you're super
by eyberg 3y ago
There are a ton of different download options https://ops.city/downloads https://ops.city/downloads (versus just compiling from source yourself if you're super paranoid), including signed/notarized/stapled builds from companies such as Apple.
- lrvick 3y ago1. You are using MD5 hashes which are trivial to create collisions of 2. None of your artifacts or build script are signed by you (third party signs by apple are pointless) 3. Builds have no evidence of being reproducible, or anyone having reproduced and counter signed them. Compare to say the Bitcoin or Monero processes that have multiple people build and sign every release so it is easy to trust there were no SPOFs.