mullvad / mullvadvpn-app

The Mullvad VPN client app for desktop and mobile
https://mullvad.net/
GNU General Public License v3.0
4.96k stars 336 forks source link

[Feature request] Provide/Distribute Mullvad VPN through Accrescent Store #5606

Open pxlkng opened 9 months ago

pxlkng commented 9 months ago

Currently the only direct way of getting Mullvad VPN on Android with automatic updates and avoiding Google is through the F-Droid store. This is not optimal and there are several issues with this approach, most notably F-Droids really slow update time, their signing of all apks with their own key and therefore generally weak security model. More reasons are listed in the article.

Probably the best alternative currently available is Accrescent, which does the concept of F-Droid right, with strong security mechanics like app signing key pinning, signed repository metadata, unprivileged automatic updates and developers own apk signing keys. (more also on their site) It also has some other nice features like support for split-apks.

While I don't request that Mullvad stops to distribute Mullvad VPN through F-Droid, I would like to suggest and strongly recommend also distributing Mullvad VPN through Accrescent as at least another, safer/better, option and to maybe additionally recommend this way of installing over F-Droid for people that avoid Google Play.

On a more personal note I also feel like Accrescent is much more user-friendly and not as bloated with excess unneeded features like F-Droid. I think it goes well with Mullvads principle of being secure, private and easy to use in one.

Thank you for making Mullvad VPN and I hope that this could be considered.

BHydden commented 9 months ago

If this is your first time hearing about Accrescent, please be aware it is still in alpha and lacks many QOL features. It is also white list only currently so if you're interested discuss the matter with the dev otherwise just bookmark it for later when Accrescent is ready for widespread adoption.

Rawa commented 9 months ago

Hello, thanks for the feature request!

We've had some internal discussions about deploying on Accrescent a few months back, and we have a ticket about evaluating if we should. The last few months we had some more pressing tasks but hopefully this is something we can do in the future.

barbiehunter commented 1 month ago

Are there any news ading Mullvad to Accrescent?

Rawa commented 1 month ago

No news as for right now I'm afraid. The feature request is still very much relevant and in our backlog on what we want to do. We've had other projects with more priority to take precedence. I don't want to give out an inaccurate timeline but the teams wish is that we are able to provide this in the near future.