Maybe use a signature oracle

Posted Mar 8, 2025 20:15 UTC (Sat) by mathstuf (subscriber, #69389)
In reply to: Maybe use a signature oracle by iabervon
Parent article: Hash-based module integrity checking

Doesn't F-Droid do this so that upstreams can sign with their key but F-Droid compiles-from-source verify on its own?