Replying to Avatar Nathan Day

You don't.

You trust that other have because the code is open source.

They'd have been called out by now if it was unsecure.
Avatar
The Conscious Contrarian 2y ago

Fair enough. Dumb follow up question: how do I know that what they have in their repo is the code they’re actually deploying?

Reply to this note

Please Login to reply.

Discussion

Avatar
Nathan Day 2y ago

Verification of the checksums on the binaries.

Not sure how you do that for the browser extensions though. You're trusting the browser app store to verify in that case.