Hans-Christoph Steiner @eighthave@librem.one
Joined Aug 2019
When building software, I believe it is important to work in public. Software can give small groups of developers immense power over lots of people. Like how governments work in public and corporations have to be more public than private company, developers should be transparent not only with their source code, but also the discussions and processes while building it. This can be hard to get used to, but not bad once used to it. Great examples of this are #Debian #GitLab and IMHO #FDroid
#apksigner v35.0.2 is now in #Debian trixie. The v3.1 signer rotation stuff needs testing. Please try it out!
Getting apksigner from Debian has two key advantages over the Google binaries:
* They are reproducibly built.
* They have an actual free software license.
The upcoming #Debian trixie release will ship with apksigner v35.0.2, which supports the APK v3.1 signer rotation. It is also reproducibly built, of course. I'll make a backport for bookworm too.
There are all too often complaints about #Debian: "why does it have such old packages". There is a really lovely property of properly maintained stable distribution. The only changes made are to make it more stable and more secure, e.g. targeted bug fixes only. New bugs come with new features, or even more general, new bugs come with new code. So if a release of software is already addressing the need, then new features are just adding more risk of problems
Joined Aug 2019
