Theoretically you could build firefox from source..
But yes, it's still an issue. Does anyone have a solution to trusting GPG keys on company websites? If their website gets hacked, the key could be replaced, the source-control could be replaced and you'd never know..
But yes, it's still an issue. Does anyone have a solution to trusting GPG keys on company websites? If their website gets hacked, the key could be replaced, the source-control could be replaced and you'd never know..