On android "secure messengers" and reproducible builds (or lack thereof)

FC Stegerman flx at obfusk.net
Tue Dec 6 01:17:02 UTC 2022


Hi (again)!

I looked at how several android messenger apps claiming to have
reproducible builds actually verify that they do [1].

TL;DR: It's quite possible these messengers actually have reproducible
builds, but the verification scripts they use don't actually allow us
to verify whether they do.

- FC

[1] https://gist.github.com/obfusk/c51ebbf571e04ddf29e21146096675f8


More information about the rb-general mailing list