zlacker

>>pabs3+(OP)
Guess I'm immediately uninstalling F-Droid. That chain of events looks really poor for them.

>>CountH+37
And using what instead?

>>Larrik+Oc
Nothing. I'll sideload what I need to. I didn't find it that useful.

>>CountH+bp
Okay, but sideloading is worse? AFAICT the problem we're discussing was in F-Droid doing extra verification (somewhat incorrectly, apparently) of an APK before handing it to Android to install. Regardless of F-Droid, Android will check signatures on updates against the installed version. So your response to F-Droid imperfectly checking signatures as an extra verification on first install... is to skip that entirely and do zero verification on first install? That's strictly worse for your security.