nic-delhi / AarogyaSetu_Android

Aarogya Setu Android app native code
https://www.aarogyasetu.gov.in/
Other
2.89k stars 1.94k forks source link

[Feature Request] Verifiable builds #186

Open tachyons opened 4 years ago

tachyons commented 4 years ago

Though the app is now open sourced, it is still difficult for a an independent person to confirm that code in the repo is same the code used for the production app. Reproducible build is a standard to ensure both are same by comparing cryptographic hashes.

Here is a guide for how telegram accomplished the same https://core.telegram.org/reproducible-builds

b8x commented 4 years ago

@tachyons play store has an older version (1.1.3) this repo has 1.2.0

SarangKulkarni commented 4 years ago

This is important, I think it should be prioritized.

anoop-b commented 4 years ago

Here's another guide on the same : Signal