Right. But if I were attacking you and was in your site and knew that you signed your hashes I&#x27;d be targeting your build script to save your key and passphrase, or build a backdoored version at the same time. Something like Certificate Transparency for code-signing would be really solid though; tampering would stand out. <a href="https:&#x2F;&#x2F;www.certificate-transparency.org&#x2F;log-proofs-work" rel="nofollow">https:&#x2F;&#x2F;www.certificate-transparency.org&#x2F;log-proofs-work</a><p>I think there&#x27;s value in the purely user-based solution though. If two people go to a site at the same time and aren&#x27;t served the same binary they should be curious why, even if the company securely and auditably signed both images.<p>And, it helps in all the cases when companies don&#x27;t implement great release-security.