Hacker News new | past | comments | ask | show | jobs | submit login

What do you mean?



See Moxie's explanation here: https://github.com/WhisperSystems/Signal-Android/issues/127#...

The whole thread is a good read too haha


Even without reproducible builds, that's as "insecure" as any Linux distro. Frankly, I can very well live with the F-Droid maintainers keeping the signing keys.


And apparently f-droid has reproducible builds now.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: