Different bridges.txt in torbrowser-android APK breaks reproducible builds
I was able to build torbrowser-android within F-Droid, the latest recipe can be found here.
With version 13.0.7, the built APK is almost identical to the APK released on the torproject.org website. Aside from the missing signature (the built APK is unsigned), only the bridges.txt
text file is different. In the freshly built APK, the text file is empty while the official APK has this content.
Can you adapt your build script so that a git tag in this repo always produces the same bridges.txt file? That would help with reproducible builds and might allow F-Droid to publish your signed APK.
In case you require it: diffoscope output and built APK. The official APK on torproject.org seems to not be available anymore, I re-uploaded it here.