Hans-Christoph Steiner @eighthave@librem.one
Joined Aug 2019
#apksigner v35.0.2 is now in #Debian trixie. The v3.1 signer rotation stuff needs testing. Please try it out!
Getting apksigner from Debian has two key advantages over the Google binaries:
* They are reproducibly built.
* They have an actual free software license.
The upcoming #Debian trixie release will ship with apksigner v35.0.2, which supports the APK v3.1 signer rotation. It is also reproducibly built, of course. I'll make a backport for bookworm too.
There are all too often complaints about #Debian: "why does it have such old packages". There is a really lovely property of properly maintained stable distribution. The only changes made are to make it more stable and more secure, e.g. targeted bug fixes only. New bugs come with new features, or even more general, new bugs come with new code. So if a release of software is already addressing the need, then new features are just adding more risk of problems
Joined Aug 2019
