Dehydrated@lemmy.world to Privacy@lemmy.ml · 6 months agoSignal's Meredith Whittaker scorns anti-encryption efforts as 'parochial, magical thinking' | TechCrunchtechcrunch.comexternal-linkmessage-square42fedilinkarrow-up10arrow-down10
arrow-up10arrow-down1external-linkSignal's Meredith Whittaker scorns anti-encryption efforts as 'parochial, magical thinking' | TechCrunchtechcrunch.comDehydrated@lemmy.world to Privacy@lemmy.ml · 6 months agomessage-square42fedilink
minus-squareDehydrated@lemmy.worldOPlinkfedilinkarrow-up0·edit-26 months agoIt’s more secure than F-Droid. It’s still in a pretty early stage of development though and currently only offers a handful of apps. App signing key pinning: first-time app installs are verified so you don’t have to TOFU. Signed repository metadata: repository contents are protected against malicious tampering. Automatic, unattended, unprivileged updates (Android 12+): updates are handled seamlessly without relying on privileged OS integration. First-class support for split APKs: downloaded APKs are optimized for your device to save bandwidth. No remote APK signing: developers are in full control of their app signing keys.
It’s more secure than F-Droid. It’s still in a pretty early stage of development though and currently only offers a handful of apps.