3 ms·

Let me get this straight, this does not involve handing private keys to F-Droid? The app is verified reproducible minus the signature? AFAIK it should work tha

by ardani 7y ago

Let me get this straight, this does not involve handing private keys to F-Droid? The app is verified reproducible minus the signature? AFAIK it should work that way but I couldn't tell from the diagram and skimming the text.

Boulth 7y ago
Yes, F Droid builds it itself. Then compares with your build minus the signature. If it's the same it publishes with your signature. No need for any private key handling.