this post was submitted on 21 Nov 2024
18 points (95.0% liked)
F-Droid
8266 readers
154 users here now
F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.
Matrix space | forum | IRC
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
How do you know the signature hasn't been compromised?
I think it is a big rabbit hole I don't have time to think about
I dont. As I said, I actually don't really know how to verify signatures. And even if I did, I know that you have to get the signature from somewhere else that is not run by them so that if they were compromised, the signature would not be compromised as well.