@notresz @dcid

Signal in theory has a reproducible build per https://signal.org/blog/reproducible-android/ so it should be always possible if the APK you get from Google Play Store is the same as one built from the published source code. Obviously, a target of a tailored operation will rarely verify that 😃