News for hackers. Stuff that matters.

A comment on How the Textsecure Protocol Works. Parent comment

Re:How the Textsecure Protocol Works by lisper on Saturday October 15, 2016 @06:38PM (#12715942)
Even if you had access to the source code, how would you verify that the app you are running was compiled from that source?
[ Parent | on HN ]
Re:How the Textsecure Protocol Works by conradev on Saturday October 15, 2016 @07:06PM (#12716032)
They'd need to be building reproducibly[1], which is somewhat difficult to do on iOS thanks to code signing and App Store encryption[2]. Android is definitely closer[3].

[1] https://reproducible-builds.org

[2] https://github.com/WhisperSystems/Signal-iOS/issues/641

[3] https://f-droid.org/wiki/page/Deterministic,_Reproducible_Bu...

[ Parent | on HN ]