Embed Notice

@freqchance @ireneista
Now, how do we create a more secure system for delivering software updates?

- author releases source code only
- many people independently read the source
- many different people build binaries from the source
- the builds are reproducible, so they should get identical binaries, and everyone can check that
- binary and source releases are published in sth similar to CT log, to prevent one person getting a different version than everyone else