Cannot get Android application from GooglePlay.

[sebsauvage]

Phone: Samsung Galaxy S5 new, Android 6.0.1

From GooglePlay (on the phone): Google says the application is not available in my country. (I'm in France). (Screenshot: https://framapiaf.org/system/media_attachments/files/000/045/471/original/a8a53eef29f73e10.png )

From GooglePlay website, try to install: Google says the application is not compatible with my phone (???). (Screenshot: https://framapiaf.org/system/media_attachments/files/000/045/488/original/f32eb0a29d4fcf2b.png )

Those two look like weak excuses. Could you just provide the APK on your website ?

[cjb]

Hi! Unfortunately France is the only country the app isn't live in. It's because France requires permission from the government before importing crypto from other countries:

https://en.wikipedia.org/wiki/Cryptography_law#France

We hope it will be in the store in the future.

[sebsauvage]

But the desktop applications are freely downloadable from your website. Will you also pose a restriction ?

Could you provide a direct apk download link on your website ? Or a least an md5 of the apk ? I would not want to get Keybase from dubious third-party stores.

[sebsauvage]

I don't really get it: Signal, WhatsApp and Telegram use strong crypto too, and they are available on GooglePlay.

[iopsthecloud]

 @sebsauvage did find a solution about this issue ?

[sebsauvage]

In order to try the app, I downloaded it from a third party website. :-(

[shoxxdj]

As our administration is not the faster on this planet, and download from a third party website is not in my religion, can you provide an apk here ? :D Thanks for French people !

[iopsthecloud]

@sebsauvage I did it too. @cjb I don't think that publishing an hash will be outlaw :)

[sebsauvage]

I don't think that publishing an hash will be outlaw :)

Indeed !

[treyssatvincent]

Maybe a fork from a French can bypass this liberticidal law.

Exportation and importation of cryptographic tools to or from foreign countries

you can also publish it on F-Droid (as requested by issue #6899)

[np]

Can this hash be confirmed?

sha256sum io.keybase.ossifrage_1.0.2-724749_minAPI16(armeabi-v7a,x86)(nodpi)_apkmirror.com.apk
a7996f55eef2a7dd7cf87e8ac82ea17cfacbccee07cef0ae6c14685cb7daaa27

[Dryusdan]

@renaudManda @cjb Hello I'm in France to and can't download app to (stupid useless law...) But... It's possible to put apk in the release section of Github ? :) Like that you not publish app in France ;)

[stormtrooper42]

To bypass the law just distribute the apk here or on f-droid ;)

[hferee]

My understanding is that it may only require declaration, not authorisation. If it's not possible, you might as well want to change your moto to "Crypto for (almost) everyone!"

[treyssatvincent]

@hferee requires an explicit authorization (for countries outside the EU).

It's France who should change of moto to : "(Almost) Liberté, Egalité Fraternité".

source : https://en.wikipedia.org/wiki/Cryptography_law#France Better source (but in french : https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000000801164#LEGISCTA000006136109)

[hferee]

@treyssatvincent Indeed, wikipedia is not a source.

Let's get accurate if you like. The text you refer to states (Section 1, III) states that "importing cryptology tools are required to be declared to the Prime Minister".

Here, the Prime Minister is represented by our IS security agency (ANSSI), whose web page clearly says "declaration": https://www.ssi.gouv.fr/administration/reglementation/controle-reglementaire-sur-la-cryptographie/demarches-a-accomplir/

The forms are on the same website. I'm not saying it's not a hassle, but don't make it look worse than it is.

Edit: to make it even clearer, here is the same page in english: https://www.ssi.gouv.fr/en/regulation/cryptology/declaration-and-licensing-requirements-summary/

[stormtrooper42]

Just publish your app ! Protonmail is outside the EU and they didn't make any declaration in france.

[SamouraiDev]

As far as downloading official APK via Play in France, try this: create throwaway US-based Google account, empty Play cache and download. Worked for me. For good measure, do connection over VPN. Avoid 3rd party sites.

[ZerBea]

Samsung Galaxy i9100 Lineage 14.1 Could be a nice idea to provide your APK outside the "world of google" - direct download or via F-Droid.

[depado]

I agree that it should be possible to download the APK from GH releases or directly from your website. There are also a number of people not wanting to use the Google ecosystem to download apps. Thanks a lot for your great work :)

[mikedilger]

I'm not in France, but I refuse to let Google into my phone. So I also would need a trusted source for the APK, such as F-Droid, downloading from keybase.io, or signed and put pretty much anywhere.

[HorlogeSkynet]

Salut @sebsauvage @Dryusdan, je connais bien ces pseudos, à force de les lire sur Mastodon par l'intermédiaire d'Angristan 🤣

About the issue : What the **** ? There are many applications using point-to-point encryption, but you can't publish Keybase on the Play Store ?! This is insane 😂

And yeah, of course, 👍 for F-Droid, it'll help many many many many (many) people using custom ROMs, without GApps.

A big thanks anyway, keep on 💪

[solvaholic]

Per https://github.com/keybase/client/issues/6899 this issue has been resolved.

[alensiljak]

After reading 6899, the issue is nowhere near being resolved. I also had to resort to downloading the apk from a 3rd-party site. Hard to think that I should trust that binary.

[ZerBea]

For me, it is. Now using SIGNAL. Direct download from their web site: https://signal.org/android/apk/ without dependence of GOOGLE!