you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 years ago (2 children)

Interesting. But should this apply to many apps on F-Droid? I also have an app published on both the Play Store and F-Droid and I don't recall having seen requests to change the application ID to avoid clashes between stores.

  • source
  • hideshow 4 child comments
  • [–] 11 points 2 years ago* (last edited 2 years ago)

    KDE Connect is likely a special case; as it is a PC integration app, and a very feature-loaded one at that, it accesses a whole bunch of sensitive stuff like notifications, clipboard, direct file access, SMS functions, keyboard inputs and more.

    More than any other non-root-accessing app, you do not want a trojanised version of KDE Connect on your phone.

  • source
  • parent
  • [–] 2 points 2 years ago (1 child)

    If the signature matches, Google probably won't care where they are installed from. I suspect that the KDE Connect in fdroid is signed with a different certificate than on google play, causing it to be flagged as an impostor. This could probably be easily prevented by using the same cert or different app identifiers (to cause them to be treated as different apps).

  • source
  • parent
  • hideshow 2 child comments