Post #2061360
2026-04-06 15:55 UTC
@fdroidorg I'd like to correct my statement then F-Droid only ships developers signatures for reproducible builds. There the signature is not important though because I can verify that the binary matches the code.
Where it would be important is when there a no reproducible builds.
https://f-droid.org/en/docs/FAQ_-_App_Developers/#what-about-signing
Replies (1)
-
@fdroidorg@floss.social 2026-04-06 16:01
@besendorf Thank you for the correction and we will make the docs a bit clearer in this regard. And we agree that many apps will have an issue, as they are signed by F-Droid for historical reasons.