Embed Notice

Note to self:

I must admit I probably could have used a slide about why #ReproducibleBuilds is important in my talk yesterday.

More and more I would like to stress that reproducible builds are most importantly about being able to say that a given artifact was produced from specific bit of source code, and all of the security and other benefits derive directly or indirectly from that.

Ideally you can recursively make such assertions all the way down, and you end up with #BootstrappableBuilds