desruisseaux commented on PR #508:
URL: https://github.com/apache/maven-jar-plugin/pull/508#issuecomment-5395326768

   > A different compiler version can easily choose to perform different 
optimizations; e.g. to unroll a loop or not, while remaining fully spec 
conformant. 
   
   Yes, this is exactly why I think that strictly reproducible builds currently 
works only by chance. Doing semantically reproducible builds at the bytecode 
level would be challenging, but if we start with only the easy part (ignoring 
timestamp, compression and a few selected metadata such as `Created-By`), we 
have something working for the current state of the industry and we prepare the 
ground for more advanced comparisons in the future if the above-cited 
differences in bytecode are observed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to