laanwj on Nostr: it does, both for MacOS and Windows it's non-trivial to do this with a deterministic ...

it does, both for MacOS and Windows

it's non-trivial to do this with a deterministic build, because we can't exactly distribute the certificates to builders-who can be anyone

so we first do a non-codesigned build pass, then the people with the certificates sign their binaries using the appropriate signing tool, and upload the detached signature (for both platforms) to https://github.com/bitcoin-core/bitcoin-detached-sigs

these are subsequently attached in a final build pass

a lot of work for what is basically security theater, but as you found there's not really a choice with these platforms