Closed AFCMS closed 1 week ago
Yes, the flatpak is official
Do you know if the verification method follows redirects? Our website is at www.minetest.net not minetest.net
Apparently yes.
https://flathub.org/apps/com.steamgriddb.SGDBoop
This app have a www website and it shows as verified by website ownership.
Flathub has started giving unverified apps a big "unverified" label, which makes the situation worse IMO: they'll look completely unofficial.
Linux Mint software manager will now not only display unverified Flatpaks as insecure, but they will be hidden by default:
The main blocker for me here is that we do not have ownership or even write access to the flat hub Minetest repository. Are we supposed to?
You're supposed to. Flathub has a policy that any upstream developer who wants access to the manifest repository can get it. See the documenation.
as part of setting up Flathub, some applications are being distributed on Flathub without the involvement of their developers. We would prefer that these applications are controlled by their authors.
If an application that belongs to you is being distributed without your involvement, please get in touch with the Flathub admins, so that we can discuss transferring ownership.
The Flathub link is the recommended version of Minetest under Linux, so I would assume it's officially maintained? (at least as an end user)
So I think it would make sense to make the Flathub app verified (which should be pretty easy, it's just a static file added to the website).
https://docs.flathub.org/docs/for-app-authors/verification