• tomalley8342@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    8 hours ago

    Yes, however, the article is titled “F-Droid Security Issues”, not “F-Droid FOSS Issues”. I’m not sure why anyone would read that and say “well what about the four freedoms?”. That’s not what the article is talking about.

    ultimately conclude that its premise is inherently flawed regardless of implementation details

    In terms of security, which is true.

    aside from a bizarre claim that F-Droid supporting multiple repositories is a Bad Thing because it interferes with, and I quote, “UserManager which can be used to prevent a user from installing third-party apps” - what does this have to do with privacy?

    It doesn’t. It’s a security issue.

    Just allow devs to upload their own build with their own keys like Accrescent. It’s not like the whole “audit” system is meaningful anyways.

    It’s true, F-droid’s signature doesn’t provide any meaningful security guarantees.