Nostr Web Client

#asknostr

How do you prove that a running server/service runs on a certain commit?

In a verifyable manner not requiring trust. Like believing that the written commit hash on the page footer is really the correct commit hash?

#grownostr #dev #service

Kc 1y ago

From an external view, you can't. If you have access to the binaries, you could compile the source at the stated commit and compare the result with the running ones.

Reply to this note

Please Login to reply.

Discussion

Crusty 👨‍💻 1y ago

And even if the service lets you check the binaries, it can show you fake binaries that will match.

Kc 1y ago

Yeah right. In the end it's all about what you have under your control and what not.