minvws / nl-covid19-notification-app-design

Design documentatie rondom Covid19 Notificatie App
European Union Public License 1.2
196 stars 37 forks source link

Reproducible Builds #10

Closed TeunVR closed 4 years ago

TeunVR commented 4 years ago

Het vrijgeven van de source-code van de covid-notification app is belangrijk voor de acceptatie ervan. Het is echter niet eenvoudig om te verifiëren dat de binary die in de App Store en Play Store staat ook werkelijk op basis van die source-code is gebouwd.

Andere projecten (bv Signal en Telegram) staan voor dezelfde uitdaging: https://github.com/signalapp/Signal-iOS/issues/641 https://core.telegram.org/reproducible-builds#reproducible-builds-for-ios

Helaas lijkt er niet direct een technische oplossing hiervoor te zijn. Misschien is het een idee om dit procesmatig in te regelen. Bv door onafhankelijke “getuigen” tijdens bouwen/submitten naar stores?

bwbroersma commented 4 years ago

This is not the correct repo for this issue, this is about the visual design only. The code repo is yet to be published, there is a requirements folder in nl-covid19-notification-app-coordination so that repo would better fix this discussion (BTW I agree and there should be more stuff to take care of, e.g. anonymous posting and decoy submissions, some of we advised long ago).

TeunVR commented 4 years ago

Can you transfer this issue to the other repo? I don’t have write-permissions.

bwbroersma commented 4 years ago

I've zero rights, I'm a technical critic just like you, not a member of the development team.

TeunVR commented 4 years ago

Ok i’ll close this one. Copied to other repo.

pro-sumer commented 4 years ago

This is not the correct repo for this issue, this is about the visual design only.

Is it?

The single line description indeed uses the word “design”, but it’s not clear whether that means UI/UX (look & feel) or code architecture (internal structure).

Maybe @jelleprins can clarify that to manage expectations?

bwbroersma commented 4 years ago

It is, also see the recent architecture addition to the nl-covid19-notification-app-coordination repo. I do agree it can and should be clearly stated by adding visual design, because I was wondering at first too.

pro-sumer commented 4 years ago

I was not aware of that repo...

Thank you for mentioning it!