Establishing Correspondence Between an Application and its Source Code
How Combining Two Completely Separate Open Source Projects Can Make Us All More Secure
When you run an application, how can you verify that what you are running was actually built from the code that a trusted developer wrote?
Read more: Establishing Correspondence Between an Application and its Source Code
Story added 4. April 2016, content source with full text you can find at link above.