Live data from Hacker News

The ProtonMail Android app is now open source

protonmail.com

1–10 of 84 posts

Re: The ProtonMail Android app is now open source

#6

ProtonMail seems to be on a roll this month. They both released Bridge for Linux [1] and open sourced Bridge [2]. [1] https://protonmail.com/blog/proton-bridge-linux-launch/ [2] https://protonmail.com/blog/bridge-open-source/

Apparently this marks the occasion that all of their non-beta apps are now open source.

Re: The ProtonMail Android app is now open source

#7
Cool. But neither the audit nor the repository explains if it's possible to create the APK in a reproducible way. Google Play distributed APKs contain their signatures, so in theory it wouldn't be possible to 1:1 reproduce the distributed ones.

However for F-droid this would allow them to sign their own APKs and provide some additional security guarantees in their supply chain.

Also a bit concerning that there is no tags yet in the repository.

Re: The ProtonMail Android app is now open source

#9
post #7

Cool. But neither the audit nor the repository explains if it's possible to create the APK in a reproducible way. Google Play distributed APKs contain their signatures, so in theory it wouldn't be possible to 1:1 reproduce the distributed ones. However for F-droid this would allow them to sign their own APKs and provide some additional security guarantees in their supply chain. Also a bit concerning that there is no…

You can still upload the app with your signing key. But it's also true that Google now push developers to leave the APK signing process to them

Re: The ProtonMail Android app is now open source

#10
Great to see this! On another note: there was a six month gap (unless I'm mistaken) between the iOS version being open sourced, and this Android release. I am a bit surprised that iOS got open sourced first. Is this because it did not receive the same security audit that presumably held up the release of the Android source?
Post reply on HN