[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > This would make verification much more difficult: We’d need ELF-capable
  > tools that know about the special section, etc.

That's an easy job, not a real difficulty.

  > I would argue that, if builds are reproducible, then the build time of a
  > particular build doesn’t matter.  What could be useful information is
  > the commit or time of commit of the source being built.

Maybe you're right about that -- if the sources match some version in
the repository.  But what about when they don't?  For instance, if
you've made local changes?

I have found it useful in Emacs to see the date when I built Emacs.

-- 
Dr Richard Stallman
President, Free Software Foundation (gnu.org, fsf.org)
Internet Hall-of-Famer (internethalloffame.org)
Skype: No way! See stallman.org/skype.html.


Reply via email to