Hacker News new | ask | show | jobs
by eighthave 1734 days ago
If a project maintained reproducible builds, then they can have the best of both worlds: their own repo where they can publish builds as they like, then f-droid.org can later reproduce them and use the upstream developer's signature.