Skip to content

Releases: WFT345/AlpenSync

Release list

AlpenSync 0.1.1

Choose a tag to compare

@WFT345 WFT345 released this 22 Sep 21:03

Security hardening release. No functional changes to sync.

  • Network requests are strictly confined to Proton's API origin at the HTTP-client layer; redirects are never followed.
  • The derived mailbox passphrase is wiped from memory after use.
  • Per-account storage names are collision-proof (SHA-256 based).
  • Unused legacy account permissions removed from the manifest.

First signed APK. This and all future GitHub releases are signed with the AlpenSync developer key. Verify before installing:

apksigner verify --print-certs alpensync-0.1.1.apk

Expected SHA-256 certificate digest:

8d2781dc40ad1b55a0ea9bf79f6232bfe8a53b791d32361c8d8fa467b8f578ef

Note: if you previously installed a debug build from source, Android will refuse this APK as an update (different signature) — uninstall the debug build first. F-Droid listing is planned; this APK is the canonical self-distributed build.