A big news for SimpleX Chat privacy and security:
Android apps released via GitHub and F-Droid are now 100% reproducible!
It means that you can easily verify that the app is secure, even if the download site was hacked.
From v6.5 our release process is:
1) build Android apps on two independent machines and confirm they are 100% identical;
2) cryptographically "sign" them;
3) add signature files to the release page so you can verify.
v6.5 beta.3 release:
https://github.com/simplex-chat/simplex-chat/releases/tag/v6.5.0-beta.3Server and Linux desktop builds were already reproducible, and Android APKs are now as secure.
Anyone can check it themselves - no coding needed, just follow our simple guide to verify the app is genuine or run the build yourself:
https://simplex.chat/reproduce/