What reproducible builds actually prove
A checksum proves you got the file the publisher sent. A reproducible build proves that file matches the source you can read. Two different claims.
Filtering by topic #verification · clear
A checksum proves you got the file the publisher sent. A reproducible build proves that file matches the source you can read. Two different claims.