mullvad / mullvadvpn-app

The Mullvad VPN client app for desktop and mobile
https://mullvad.net/
GNU General Public License v3.0
5.12k stars 339 forks source link

[Feature request] Provide/Distribute Mullvad VPN through Accrescent Store #5606

Open pxlkng opened 11 months ago

pxlkng commented 11 months ago

Currently the only direct way of getting Mullvad VPN on Android with automatic updates and avoiding Google is through the F-Droid store. This is not optimal and there are several issues with this approach, most notably F-Droids really slow update time, their signing of all apks with their own key and therefore generally weak security model. More reasons are listed in the article.

Probably the best alternative currently available is Accrescent, which does the concept of F-Droid right, with strong security mechanics like app signing key pinning, signed repository metadata, unprivileged automatic updates and developers own apk signing keys. (more also on their site) It also has some other nice features like support for split-apks.

While I don't request that Mullvad stops to distribute Mullvad VPN through F-Droid, I would like to suggest and strongly recommend also distributing Mullvad VPN through Accrescent as at least another, safer/better, option and to maybe additionally recommend this way of installing over F-Droid for people that avoid Google Play.

On a more personal note I also feel like Accrescent is much more user-friendly and not as bloated with excess unneeded features like F-Droid. I think it goes well with Mullvads principle of being secure, private and easy to use in one.

Thank you for making Mullvad VPN and I hope that this could be considered.

BHydden commented 11 months ago

If this is your first time hearing about Accrescent, please be aware it is still in alpha and lacks many QOL features. It is also white list only currently so if you're interested discuss the matter with the dev otherwise just bookmark it for later when Accrescent is ready for widespread adoption.

Rawa commented 11 months ago

Hello, thanks for the feature request!

We've had some internal discussions about deploying on Accrescent a few months back, and we have a ticket about evaluating if we should. The last few months we had some more pressing tasks but hopefully this is something we can do in the future.

barbiehunter commented 3 months ago

Are there any news ading Mullvad to Accrescent?

Rawa commented 2 months ago

No news as for right now I'm afraid. The feature request is still very much relevant and in our backlog on what we want to do. We've had other projects with more priority to take precedence. I don't want to give out an inaccurate timeline but the teams wish is that we are able to provide this in the near future.

git70 commented 1 month ago

Hi guys!

I just wanted to add my +1! Acrescent is gaining more and more attention in the privacy/security community. It has also gained the approval of GrapheneOS and is included in their repository. I love Mullvad, but the competition is already in Accrescent, so I can't imagine this store without you ;)

ghost commented 3 weeks ago

I would love to see you there too!

PrivacyAndSecurity commented 2 weeks ago

I agree, that we would love to see Mullvad VPN on Accrescent! Maybe you ask why we want this or what Benefits it would have for us as Users.

The Benefits for me would be a few, like these:

PrivacyAndSecurity commented 1 day ago

Is there any Updates on this?