Replying to Avatar Leo Wandersleb

How does a permission to install non-PlayStore APKs relate to the OS's TOFU?

If you install an app from PlayStore and then try to **update** it with some self-compiled version, you can't because TOFU.

If you installed an app from F-Droid and then try tu update via the PlayStore, you can't because of TOFU (unless if the apk is signed by the same keys).
Avatar
Zapstore 11mo ago

We're talking about the same thing man, no disagreement. You still need information on provenance when first installing, and the nostr web of trust plus verification is a way of doing that (as opposed to a centralized curator)

Reply to this note

Please Login to reply.

Discussion

No replies yet.