Re:Running the "Reflections on Trusting Trust" Compiler
by bheadmaster on Thursday October 26, 2023 @06:06AM
(#38023693)
Perhaps, but with deterministic builds, anyone can read the source code, recompile, verify integrity of the signed code, and even sign it themselves as a confirmation of its integrity. The more (independent) signatures there are, the more you can trust the precompiled binary.
[ Parent
| on HN ]
There are no comments on this comment yet.