How is it possible, that Signal still only provides a .deb package and no .rpm, or even better AppImage or Flatpak? There is an unofficial Flatpak but is it secure?

      • theorangeninja@lemmy.todayOP
        link
        fedilink
        arrow-up
        9
        ·
        6 months ago

        Well I think you have to distinguish between a messenger and other programms, because a messenger has a lot of sensitive data.

      • t3rmit3@beehaw.org
        link
        fedilink
        arrow-up
        8
        ·
        edit-2
        6 months ago

        Just because something is built out of love does not make it safe, and attestation is about safety. You wouldn’t trust an un-attested surgical device, just because there’s a really positive community around its design.

        Signal is a life-or-death app for some people.

        • Successful_Try543@feddit.de
          link
          fedilink
          arrow-up
          1
          ·
          6 months ago

          The ‘appstore’ of some distributions, e.g. Linux Mint, displays a warning or hint for unofficial flatpaks. In Mint the display of unofficial flatpaks are toggled off by default and there is a warning or recommendation displayed against toggling on.

      • Lemongrab@lemmy.one
        link
        fedilink
        arrow-up
        12
        ·
        6 months ago

        I just read through the unofficial Flathub Flatpak for Signal and it is very simple. It fetches the .deb from Signal’s website, installs it in the sandbox, and uses a launcher script to tell the OS some basic toggles like should it start minimized or should it display a tray icon. In the script it makes use of zypak, which to my understanding is to tell electron (chromium) to allow sandboxing to be handled by Flatpak. Here is the repo and the build instructions is the .yaml file.

      • Lemongrab@lemmy.one
        link
        fedilink
        arrow-up
        7
        ·
        6 months ago

        Flatpaks are pretty easy to read through. Just go to the links section of Flathub and click the manifest, then read it to see what is done during building.