Publishing to zapstore yet?
A big news for SimpleX Chat privacy and security:
Android apps released via GitHub and F-Droid are now 100% reproducible!
It means that you can easily verify that the app is secure, even if the download site was hacked.
From v6.5 our release process is:
1) build Android apps on two independent machines and confirm they are 100% identical;
2) cryptographically "sign" them;
3) add signature files to the release page so you can verify.
v6.5 beta.3 release: https://github.com/simplex-chat/simplex-chat/releases/tag/v6.5.0-beta.3
Server and Linux desktop builds were already reproducible, and Android APKs are now as secure.
Anyone can check it themselves - no coding needed, just follow our simple guide to verify the app is genuine or run the build yourself: https://simplex.chat/reproduce/
Discussion
haven't seen it before :)
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qghwaehxw309aex2mrp0yhxummnw3ezucnpdejz7qpq0r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7s85uvay is cool - they don't chase people to publish apps, they just do that. Thank you.
You're already there, would be much nicer if the release was officially signed though!
Is it? it's nice 😉 We can do that.