Releases: WFT345/AlpenSync
Releases · WFT345/AlpenSync
Release list
AlpenSync 0.1.1
Security hardening release. No functional changes to sync.
- Network requests are strictly confined to Proton's API origin at the HTTP-client layer; redirects are never followed.
- The derived mailbox passphrase is wiped from memory after use.
- Per-account storage names are collision-proof (SHA-256 based).
- Unused legacy account permissions removed from the manifest.
First signed APK. This and all future GitHub releases are signed with the AlpenSync developer key. Verify before installing:
apksigner verify --print-certs alpensync-0.1.1.apk
Expected SHA-256 certificate digest:
8d2781dc40ad1b55a0ea9bf79f6232bfe8a53b791d32361c8d8fa467b8f578ef
Note: if you previously installed a debug build from source, Android will refuse this APK as an update (different signature) — uninstall the debug build first. F-Droid listing is planned; this APK is the canonical self-distributed build.