laanwj on Nostr: it does, both for MacOS and Windows it's non-trivial to do this with a deterministic ...
it does, both for MacOS and Windows
it's non-trivial to do this with a deterministic build, because we can't exactly distribute the certificates to builders-who can be anyone
so we first do a non-codesigned build pass, then the people with the certificates sign their binaries using the appropriate signing tool, and upload the detached signature (for both platforms) to https://github.com/bitcoin-core/bitcoin-detached-sigs
these are subsequently attached in a final build pass
a lot of work for what is basically security theater, but as you found there's not really a choice with these platforms
it's non-trivial to do this with a deterministic build, because we can't exactly distribute the certificates to builders-who can be anyone
so we first do a non-codesigned build pass, then the people with the certificates sign their binaries using the appropriate signing tool, and upload the detached signature (for both platforms) to https://github.com/bitcoin-core/bitcoin-detached-sigs
these are subsequently attached in a final build pass
a lot of work for what is basically security theater, but as you found there's not really a choice with these platforms