How could we accelerate *deployment* of verified reproducible builds?

David A. Wheeler dwheeler at linuxfoundation.org
Fri Jan 29 22:39:01 UTC 2021


My post "Preventing Supply Chain Attacks like SolarWinds” <https://www.linuxfoundation.org/en/blog/preventing-supply-chain-attacks-like-solarwinds/> prominently discusses verified reproducible builds.

What would be especially helpful for accelerating deployment of verified reproducible builds in a few key places? E.g., what tools, infrastructure, people paid to do XYZ?

Thanks!

--- David A. Wheeler



More information about the rb-general mailing list