F-drid warns that the project could end because of the new requirements of Google for all Android developers to verify their identity.
The external App Store argues that Google wrongly framed this new requirement as a security measure against malware and the goal is to sharpen the grip on ‘a formerly open ecosystem’.
F-drid is an external app store for Android devices that distribute free and open-source software via a catalog of apps that are built directly from the publicly available source code.
Before publishing an app, the platform she checks them for hidden trackers or adware, and distributes reproducible builds For anonymous users who do not need an account to gain access.
In August, Google announced plans to introduce a new ‘developer verification’ requirement in 2026, to block malware installations from Sideloaded apps outside the official Google Play App Store.
The new decree requires that all apps that are installed on certified Android devices must come from developers who have verified their identity with Google; Otherwise his installation will be blocked and the user will receive a warning message.
Although the proposed system at first sight seems like a step in the direction of better security, F-drid says that many open-source developers would not give their identification data to Google.
F-drid explains that it cannot force these publishers to register with Google and to pay the corresponding fees, nor to grab the app identification data on their behalf.
“The F-drid project cannot require developers to register their apps via Google, but at the same time we cannot take over the application identification data for the open-source apps that we distribute, because that would effectively grab exclusive distribution rights on those applications”–“- F-drid
The board member of the project, Marc Prud’hommeaux, said that “Google’s registration decision will end the F-drid project and other free/open-source app distribution sources as we know them today.”
That is why enforcing this new system can refuse access to a large number of other reliable apps, while users also prevent users from updating existing installations.
F-drid emphasizes that this identification requirement is not related to security, because Android has all the Play Protect system, that all the risks must tackle that the verification of developers must tackle.
“We do not believe that the registration of developers is motivated by security,” State F-drid. “We believe that it is about consolidating strength and sharpening control over a formerly open ecosystem.”
At Regulators, F-Drid is critical of investigating this development within the framework of competition and digital rights. The project also encourages developers and users to argue for software freedom by dealing with legislators.
Bleepingcomputer contacted Google to request a comment about F-drid’s statement and whether its concerns are substantiated, but we have not received a response through publication time.
Meanwhile, the company a follow -up article published Yesterday, where it repeated that sideloading on Android will still be possible, albeit only for apps of verified developers.
However, exemptions are permitted for hobbyist developers who distribute apps to a small number of devices.
Google also clarified that the new decree has no influence on Android Studio workflows, because the development and build test phases will not be subject to the new limitations.
Become a member of the Breach and Attack Simulation Summit and experience the Future of security validation. Hear from top experts and see how AI-driven bass transforms infringement and attack simulation.
Miss the event that does not form the future of your security strategy
#Fdrid #project #threatened #DEV #registration #rules #Google