Replies (14)

dluvian's avatar
dluvian 1 year ago
Because fdroid sucks: - Only allows FOSS apps - No reputation layer - No social layer - Delay for listing new apps - Delay for publishing updates - Looks like shit, normies will not use it
fdroid sucks, but not for those reasons. How about it uses fdroids signing key, unlike obtainium, which uses the developer's signing key.
I'm all for a store that only allows FOSS apps, but I don't like how they use their own signing keys. That's definitely suspicious.
The problem with good UX is that it is more often then not used for evil.
most important apps are signed by fdroid, not by the app devs (for the most part at least; fdroid offers a method to build the app in a way that permit devs to sign themself, but pratically noone uses it cause require much work). So if someone compromise fdroid, he can put arbitrary malware in the update of all your fdroid apps.
Default avatar
Duvel 1 year ago
I mainly use Obtainium and Github release urls. Some apps are unforunately only available via Fdroid.
Default avatar
Duvel 1 year ago
Nice, I need to look into that.