Check reproducibility of the build of 8.5a8
I did the build of 8.5a8 that we are releasing:
https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.txt https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.txt-boklm.asc
https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.incrementals.txt https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.incrementals.txt-boklm.asc
In order to verify that the build of this release is reproducible, we need a second person to do a build. We usually do that before publishing a release. However we are having some delay doing it this time, and because this release includes an important security fix, we will be doing this verification after the release is published.