But how do you know that the build you verified yourself is the one that is runn...

megous · on June 10, 2018

End-to-end yousually means client to client. So all you need to verify is client code.

Boulth · on June 10, 2018

Intel SGX, if you trust Intel. But the amount of code that runs on SGX is limited so usually you'd run only critical parts there.

A practical example: https://signal.org/blog/private-contact-discovery/

spinsser · on June 11, 2018

Wow! That is an interesting issue.

I was thinking of having a third-party trusted services that compares the hash of the deployed application to the one they independently compiled themselves.

But the complexity is nontrivial and there is enough variations between the output of the same source code across different build environments that would make hashes useless.

Another possibility is having trusted compilers that would send link the source code to the build in a trusted repository.