I don't think F-Droid needs to be replaced (the focus off Foss software is awesome) but they do maybe need some help and focus on being more secure. At least for the official repos. Release 2 clients afterwards, one that is secure and only uses only official repos & one that allows adding 3rd party repos with clear warnings you sacrifice security by adding other sources.
Or hopefully somebody else picks something similar up so we aren't holding our breath.
GrapheneOS (npub1kwa…e0nj)
Jawsh
npub1df…vrljd
2025-07-04 05:38:29 UTC
in reply to nevent1q…f2r3
Author Public Key
npub1dfxpaareqhky0ejf256udcgqyptqqgvrgxhv02mqdcjurcwfqr9qsvrljdSeen on
wss://relay.momostr.pinkPublished at
2025-07-04 05:38:29 UTCEvent JSON
{
"id": "9d8c82b196563b952142d136fdf1c6dc4f2b048655994036f0df63a25607b05a",
"pubkey": "6a4c1ef47905ec47e6495535c6e100205600218341aec7ab606e25c1e1c900ca",
"created_at": 1751607509,
"kind": 1,
"tags": [
[
"p",
"6a4c1ef47905ec47e6495535c6e100205600218341aec7ab606e25c1e1c900ca"
],
[
"p",
"b3ba3c5045fbaf99be9cb4daa9f1d7baeedaba0fc5b91596511e2fb7a70dd7f9"
],
[
"e",
"1125dd51b8c100736263f57f0827cce1d2773e8920b6c021c84bffab33bb338e",
"",
"reply",
"6a4c1ef47905ec47e6495535c6e100205600218341aec7ab606e25c1e1c900ca"
],
[
"p",
"435434af32e68b4e3b6ebe24b8f723052023fe0abfe1a8e45e5c4780df8b1398"
],
[
"e",
"c0d501b265a9d65fdbec2fc451764d57010bfd984431f07a49dd50f4e2ad2b9d",
"",
"root",
"b3ba3c5045fbaf99be9cb4daa9f1d7baeedaba0fc5b91596511e2fb7a70dd7f9"
],
[
"p",
"bdded8d96fbcdd64aaa177cea240b287909fd5ee9fce474ab3af04dae36f99fc"
],
[
"proxy",
"https://207.social/@jawsh/114793349735847781",
"web"
],
[
"proxy",
"https://207.social/users/jawsh/statuses/114793349735847781",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://207.social/users/jawsh/statuses/114793349735847781",
"pink.momostr"
],
[
"-"
]
],
"content": "I don't think F-Droid needs to be replaced (the focus off Foss software is awesome) but they do maybe need some help and focus on being more secure. At least for the official repos. Release 2 clients afterwards, one that is secure and only uses only official repos \u0026 one that allows adding 3rd party repos with clear warnings you sacrifice security by adding other sources.\nOr hopefully somebody else picks something similar up so we aren't holding our breath.\nnostr:npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj",
"sig": "a5cef4fb1ca7936d6e64041604a5fa3c3bab5bf2f381f79dce56871fdf3c72a594ea679239c6b4f42214c3d3e144fb2b6797cc5a0968797e4f695470430fa9b0"
}