Felix

I think they meant the target api that should always be the latest available, ideally.
In android you have targetSdk and minSdk.
I think minSdk can be as low as you want, but targetSdk should be always as high as possible.
This way the app is still up-to-date security-wise, even if it still works on older sdks.
If you have a targetSdk that is too low, you are likely pulling in security issues with those sdk's

2025-01-27 16:12:42 GMT

- reply

You are not the only ones that struggle with f-droid. (There is an ongoing struggle to fix certificate pinning by f-droid by a former maintainer, which has neither been acknowledeg nor accepted).
But the question is: what alternatives are there? As far as i can tell, f-droid is the only large scale-repository of open source apps there is.

2025-01-25 19:29:21 GMT

- reply

It is demonstrably worse! By a lot. (If your metric is securely/privately communicating)
Telegram is sending and storing messages in plaintext, by default. This makes it extremely dangerous to be used for most people.