Earlier quoted context omitted.
I have unpopular opinions about this, because Signal has been so hostile to anyone other than Signal themselves being involved. But to be specific: "open source" claims go out the window when they're; 1. Not reproducible (before anyone links me to the "reproducible steps" please actually read them because they tell you directly that they will not create a reproducible output). 2. Able to hide development of mobilecoi…
Can you point out where it says it won't be a reproducible output? https://github.com/signalapp/Signal-Android/blob/main/reprod...
Why can't I sha256sum the two apk?