Post #2740824
2026-02-24 22:34 UTC
@asterisk@social.linux.pizza
Interesting ! thank you :)
Replies (1)
-
@pixelschubsi@troet.cafe 2026-02-26 07:20
@gillesmertens@hostux.social @asterisk@social.linux.pizza Some of these are rather opinionated takes. Don't let perfect be the enemy of good. One of the takes is that F-Droid signs apps themselves. This is only true if reproducible builds don't work. As a developer you can have your app listed in F-Droid with your own signing key, by making it reproducible and providing a source for your own signed updates (so their server can take your signature from it rather than providing its own).