Special Wall
You may be able to find me on other platforms by the same name!
Mastodon: specialwall@woof.tech
Contact me on SimpleX or Signal!
- 0 Posts
- 1 Comment
Joined 11 months ago
Cake day: March 5th, 2025
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
This depends whether you care about security or software freedom guarantees. Because if it’s security that is the priority, F-Droid is a much weaker option than Obtanium+Appverifier because they use their own signing keys for nearly all apps. If F-Droid’s build infrastructure is ever compromised, then almost every app you have downloaded through it is also compromised. The inability for developers to control their own signatures is part of the reason Signal does not release on F-Droid.
Accrescent is a much better option than anything else because it still allows developer-managed keys, although it doesn’t have many apps. Google Play (although it does have high-security infrastructure) has the same problem as F-Droid of centrally managed keys. Obtanium with Appverifier at least lets you ensure that your app is signed by the developer.