minetest / minetest.github.io

Official Minetest website hosted by Github Pages
https://www.minetest.net/
MIT License
120 stars 63 forks source link

Verified Flathub package ? #298

Closed AFCMS closed 1 week ago

AFCMS commented 3 months ago

The Flathub link is the recommended version of Minetest under Linux, so I would assume it's officially maintained? (at least as an end user)

image

So I think it would make sense to make the Flathub app verified (which should be pretty easy, it's just a static file added to the website).

https://docs.flathub.org/docs/for-app-authors/verification

rubenwardy commented 3 months ago

Yes, the flatpak is official

Do you know if the verification method follows redirects? Our website is at www.minetest.net not minetest.net

AFCMS commented 3 months ago

Apparently yes.

https://flathub.org/apps/com.steamgriddb.SGDBoop

This app have a www website and it shows as verified by website ownership.

AFCMS commented 3 months ago

Flathub has started giving unverified apps a big "unverified" label, which makes the situation worse IMO: they'll look completely unofficial.

image

AFCMS commented 3 weeks ago

Linux Mint software manager will now not only display unverified Flatpaks as insecure, but they will be hidden by default:

https://blog.linuxmint.com/?p=4719

rubenwardy commented 3 weeks ago

The main blocker for me here is that we do not have ownership or even write access to the flat hub Minetest repository. Are we supposed to?

1bcb commented 3 weeks ago

You're supposed to. Flathub has a policy that any upstream developer who wants access to the manifest repository can get it. See the documenation.

as part of setting up Flathub, some applications are being distributed on Flathub without the involvement of their developers. We would prefer that these applications are controlled by their authors.

If an application that belongs to you is being distributed without your involvement, please get in touch with the Flathub admins, so that we can discuss transferring ownership.