If an app doesn’t support reproducible builds, the version you can download from F-Droid was built and signed by F-Droid, not by the dev
If an app doesn’t support reproducible builds, the version you can download from F-Droid was built and signed by F-Droid, not by the dev
[…], from that point the app will be built by f-droid with their own digital signature.
This part of your comment is not quite true. One of the advantages of reproducible builds is that the app can be signed by the developer but fdroid can still verify that it has been built from the correct source code. You can check out the documentation here: https://f-droid.org/docs/Reproducible_Builds/
Wouldn’t that hurt Russia as much as any other country?
linked to Chinese speaking groups
What is that even supposed to mean?
I use ntfy and have no problems. It’s very reliable. No idea about graphene though
Have you tried Material Files (it’s on fdroid)? It’s genuinely great and it supports different remote protocols, although I haven’t personally tried this feature.
I don’t know about “simple”, but it’s very good. Been a happy user for many years
Wunderground was great before they got acquired by IBM
I totally get where you’re coming from and if there was a lean and stable app for files, calendar, contacts and tasks I would be very happy to check it out. But last time I searched there wasn’t anything I would trust.
Also, it looks like roundcube is now part of nextcloud 🤷
Fair enough, I guess, but what if I wanna selfhost?
This is great news! 👏
Honest question… Is there a better alternative?
It really isn’t. While the requirements are less strict than for the main repo, there is a review process to add a new app and I think they also have some automated checks. Additionally, Izzy (the maintainer of izzyondroid) is (was?) a member of the fdroid team.
Does this mean that every app there is legitimate? Of course not, but the same can be said about any other app store/repository.
Yes it does, but it is not part of nextcloud itself, they require you to host a collabora CODE server. It works quite well but it’s a bit of a hassle to set up
The website works for me and seems legit (looks like a regular uni website…). It reads:
JAP (called JonDo in the scope of the commercial JonDonym anonymous proxy servers - AN.ON remains free of charge) makes it possible to surf the internet anonymously and unobservably.
Without Anonymization, every computer in the internet communicates using a traceable Address. That means:
- the website visited,
- the internet service provider (ISP),
- and any eavesdropper on the internet connection
can determine which websites the user of a specific computer visits. Even the information which the user calls up can be intercepted and seen if encryption is not used. JAP uses a single static address which is shared by many JAP users. That way neither the visited website, nor an eavesdropper can determine which user visited which website. How it works
Instead of connecting directly to a webserver, users take a detour, connecting with encryption through several intermediaries, so-called Mixes. JAP uses a predetermined sequence for the mixes. Such a sequence of linked mixes is called a Mix Cascade. Users can choose between different mix cascades.
Since many users use these intermediaries at the same time, the internet connection of any one single user is hidden among the connections of all the other users. No one, not anyone from outside, not any of the other users, not even the provider of the intermediary service can determine which connection belongs to which user. A relationship between a connection and its user could only be determined if all intermediaries worked together to sabotage the anonymization. more…
The intermediaries (mix providers) are generally provided by independent institutions which officially declare, that they do not keep connection log files or exchange such data with other mix providers. JAP shows the identity and number of organisations in each Mix cascade in detail, and verifies this information by cryptographic means. The users are thus able to selectively choose trustable mix cascades.
Seems like a fun research project. But not sure how much I would personally trust it.
Also, no idea about the app but at least the project seems legit.
Website is down?