Still not 100% secure. Someone can MITM your connection and forge the info used to verify builds.
It’s a silly example, but the point stands: there is no 100% security for anything that any other person or system has had any access to. It’s not a reasonable standard to demand.
Comments
Except if your software is reproducible: https://reproducible-builds.org/
Still not 100% secure. Someone can MITM your connection and forge the info used to verify builds.
It’s a silly example, but the point stands: there is no 100% security for anything that any other person or system has had any access to. It’s not a reasonable standard to demand.
There is no 100% of anything, but there is a reasonable security.