F-Droid: Our build and release infrastructure, and upcoming updates

Posted May 31, 2022 13:15 UTC (Tue) by mathstuf (subscriber, #69389)
In reply to: F-Droid: Our build and release infrastructure, and upcoming updates by agateau
Parent article: F-Droid: Our build and release infrastructure, and upcoming updates

Ah, they *support* using developer signatures (they don't get your key). Basically, they can take your source and your signature, and if they can reproduce the same binary, apply your signature to the application.

https://f-droid.org/docs/Reproducible_Builds/

F-Droid: Our build and release infrastructure, and upcoming updates

Posted Jun 1, 2022 16:20 UTC (Wed) by agateau (subscriber, #57569) [Link] (1 responses)

Oh, nice! I didn't know about this.

I guess it would not be a good idea to apply it to apps which have already been published using F-Droid key, though, since existing users would not be able to update.

F-Droid: Our build and release infrastructure, and upcoming updates

Posted Jun 1, 2022 16:38 UTC (Wed) by mathstuf (subscriber, #69389) [Link]

I think I've seen a few apps "migrate" keys with an explicit opt-in. The F-Droid maintainers may have a path to use here (though save data may be lost, so an export/import option may be warranted).