#WireGuard becomes the first VPN app on #FDroid to be built reproducibly! This means that WireGuard on F-Droid is now guaranteed to be 100% (bit-by-bit) equal to the WireGuard the developer builds.

If you're using WireGuard from F-Droid, please export your tunnels and re-install to switch to the developer's signature and continue receiving updates.

More details in the official WireGuard announcement: lists.zx2c4.com/pipermail/wire

New to reproducible builds? Check out f-droid.org/en/2023/01/15/towa

@fdroidorg Great, thanks to everyone who is involved in this! This is an excellent improvement for security, trust and user experience.

I just exported my connections, uninstalled the old version, installed the new, imported the connections, and deleted the export file. Worked flawlessly :)

Follow

@mxmehl @fdroidorg ah nice, the export/import workflow should help smooth the process. I'm interested in hearing about how many users find it worth it to do that kind of procedure. It is possible to fully automate it, but would take a chunk of work. A key question is: how many users are not going to update because of this? This will be valuable information as more apps transition to in

@eighthave @fdroidorg Good question. I just found out about a) the need to uninstall/install and b) the workflow for saving one's settings in the replies to this post and the original Wireguard announcement. Most certainly an effort not many users are willing (or knowing) to take.

Thinking out loud: Could the F-Droid client inform me about pending updates that require manual intervention and also provide user-friendly upgrade instructions (like backup/import procedures) for each of them?

@mxmehl @fdroidorg it is technically possible for the F-Droid client to do something like that, as long as someone maintains the data needed in fdroiddata. Following the architecture, the app itself would be the natural place to handle data and signing key migrations.

Sign in to participate in the conversation
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml