only thing is that Fdroid signs app packages with they're own key so you're adding another trusted 3rd party.
There is reasonable certainty that Gplay and Obtainium releases come straight from the dev.
Han Shan
npub1lx…6svxa
2024-09-19 16:36:05
in reply to nevent1q…wev7
Author Public Key
npub1lxzaxzge0jq9u9cecucctdt5lslwgp7hcxmp2l0wn8r2ecjenwasu6svxaPublished at
2024-09-19 16:36:05Event JSON
{
"id": "3dce289b1e24cf522d0c2578967b3af0c51f8c53ab077700e2389a0851affbaa",
"pubkey": "f985d309197c805e1719c73185b574fc3ee407d7c1b6157dee99c6ace2599bbb",
"created_at": 1726763765,
"kind": 1,
"tags": [
[
"e",
"36aac5d62a763f48cae94f274900d89d4813055a69416be17e0d71a978bdd0a5",
"",
"root"
],
[
"e",
"538e629e270a4b6ace19345f8724b6e3861215d8b2d43daaa3585c17881e8e27"
],
[
"e",
"f513b447344c9c3c4498900281b983ccb02db6dd0979077cbbe271c368142ad2",
"",
"reply"
],
[
"p",
"0689df5847a8d3376892da29622d7c0fdc1ef1958f4bc4471d90966aa1eca9f2"
],
[
"p",
"b133bfc57bed61c391d4e8f953b906c7f1709c438d91c75fb6daf79449d5789d"
],
[
"p",
"d30ea98ea65e953f91ab93f6b30ea51eb33c506f87d49f600a139aef00aa9511"
]
],
"content": "only thing is that Fdroid signs app packages with they're own key so you're adding another trusted 3rd party.\n\nThere is reasonable certainty that Gplay and Obtainium releases come straight from the dev.",
"sig": "2988f7cfbfc82a39b7e44a6d983d9ebe070dafd8cb494f5499bda80047f7a3163de94cc091abbbc4c9f9fb30549f38c9608e2776387bbbc5262851843fb8b93b"
}