[Git][reproducible-builds/specs/source-date-epoch-spec][content] 3 commits: wording: prevents against => protects against

Bernhard M. Wiedemann (@bmwiedemann-guest) gitlab at salsa.debian.org
Wed Sep 23 18:06:27 UTC 2026



Bernhard M. Wiedemann pushed to branch content at Reproducible Builds / specs / source-date-epoch-spec


Commits:
788b7257 by Bernhard M. Wiedemann at 2026-09-23T19:35:40+02:00
wording: prevents against => protects against

- - - - -
f47bdc4f by Bernhard M. Wiedemann at 2026-09-23T19:43:11+02:00
Change flaws to instructions

- - - - -
33588047 by Bernhard M. Wiedemann at 2026-09-23T19:43:13+02:00
Adapt motivation section

We copied the current definition from the website,
capitalized R-B and
show that we care about other users beside developers (developers also count as users)

- - - - -


1 changed file:

- source-date-epoch-spec.xml


Changes:

=====================================
source-date-epoch-spec.xml
=====================================
@@ -57,18 +57,20 @@
 <sect1>
 	<title>Motivation</title>
 	<para>
+		Reproducible Builds are a set of software development practices that
+		create an independently-verifiable path from source to binary code.
 		Whilst anyone can inspect the source code of free software for
-		malicious flaws, most distributions provide binary (or
+		malicious instructions, most distributions provide binary (or
 		"compiled") packages to end users. The motivation behind
-		"reproducible" builds is to allow verification that no flaws
+		Reproducible Builds is to allow verification that no malicious instructions
 		have been introduced during this compilation process by
 		promising identical binary packages are always generated from a
 		given source.
 	</para>
 	<para>
-		This prevents against the installation of backdoor-introducing
-		malware on developers' machines as an attacker would need to
-		simultaneously infect all the developers attempting to
+		This protects against the installation of
+		malware on users' machines as an attacker would need to
+		simultaneously infect all the machines attempting to
 		reproduce the build. In addition, a reproducible build has
 		other technical advantages:
 	</para>



View it on GitLab: https://salsa.debian.org/reproducible-builds/specs/source-date-epoch-spec/-/compare/896ba62dcf8383380126508644bd7ff04d5389b5...33588047b2244924971705b0d339d52b55397cc6

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/specs/source-date-epoch-spec/-/compare/896ba62dcf8383380126508644bd7ff04d5389b5...33588047b2244924971705b0d339d52b55397cc6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20260923/834c2192/attachment.htm>


More information about the rb-commits mailing list