Is it true that the VPN apps distributed via Play Store are worse than those from F-droid with respect to security?

  • neoinvin@lemm.ee
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 days ago

    if an app is available both on fdroid and the play store, and you already have google services installed, then it is almost always better to use the play store version. unless fdroid has changed recently, the way apps are signed is more robust and the chain of trust more resistant to manipulation for apps on the play store.

    if you are asking if the selection of apps on each distributor are on the whole more secure in the way they provide their service, that’s a more complicated question i can’t answer.

    • u/lukmly013 💾 (lemmy.sdf.org)@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      F-Droid (default repo) offers old versions. Good luck downgrading apps from Play Store.

      It also makes it easy to find open-source apps. Generally they also provide more info useful to me as a regular user - manuals and changelogs. Open-source app changelogs often show far more info, even library version changes. Meanwhile the average Play Store app changelog is “small improvements, better ad experience”

      Play Store needs to implement version archive and license filters. Oh, and easier beta access. Currently the registration takes extra time, and can only be done with the original account the app was installed with.