Make app available on other than non-free services
Closed this issue · 2 comments
Is there any chance of getting the Android version as an APK for download (along with the package checksum), or in some repo where excessive data-mining is not part of the process (f.x. F-Droid) ?
There are some security-conscious users out there, even with LineageOS or similar installed - which need to get their software through other means than the Google ecosystem.
Already contacted personuvernd@landlaeknir.is on this subject and was told this should happen soonish.
Well, appcenter.ms is not a free-as-in-freedom service; it's a proprietary service by Microsoft, conditioned by a bunch of Terms of Use, etc.
A simple download somewhere (f.x. covid.is) along with the package checksum would be appreciated.
Hm. I don't want to sound obtuse, but all of the code and our comments are in a not free-as-in-freedom service, a proprietary service owned by Microsoft, conditioned by a bunch of Terms of Use, etc.
App Center is the continuous integration service this project uses. It is connected directly to the repository and automatically builds what gets merged into the master and release branches. It's the delivery method that was easiest to set up and trust since these are exactly the same builds that get pushed to the stores. Plus, you don't need to sign up or accept cookies to download the APK.
Setting up a "simple download" somewhere (f.x. covid.is) takes a fair bit of effort to automate and secure properly (I don't want anyone else to have write-access to it). F-Droid looks interesting but also takes some effort to integrate with.
For this project, the delivery method is security-critical, and we need to keep the circle of trust to a minimum. We don't have more time to spend on this issue, but if you can contribute a simple automated build and distribution system where even you are locked out, then I'd be happy to consider it.