Core Apps » Bazaar

h1. Bazaar Wiki

h2. Overview

* [[Core Concept]]

* [[User Stories]]

h2. Activities and Research

* [[FDroid Audit]]

* "Kerplapp":https://github.com/guardianproject/kerplapp - dropping apps onto droids

* [[Auditing Existing APKs]]

* [[Bootstrapping Trust]]

* [[Local Data Transfer]]

* [[OTRDATA Integration Plan]]

* [[Trusted Intent Interaction]]

* [[Chained TLS Cert Verification]]

* [[Signing the Local APK Index]]

h2. Related Discussions

* posts on our blog: https://guardianproject.info/tag/bazaar/

* posts on the FDroid forum: https://f-droid.org/forums/tag/bazaar/

* [[Oct 23rd IRC Scrum log]]

* [[Nov 21st IRC log about identifying repos]]

* "F-Droid and decentralized trust convo on twitter":https://twitter.com/guardianproject/status/398092213651251201

h2. Relevant F-Droid Issues

Whenever possible we should try to frame our work in terms of the F-Droid development process. If we can fix issues in F-Droid by submitting the functionality that we need for Bazaar, then its a win-win.

* "Please provide GPG signatures for APKs":https://f-droid.org/repository/issues/?do=view_issue&issue=284 - we can provide this with GPGA, and it will help with master key bug issues on phones that have not been updated

* "Import and export list of installed apps":https://f-droid.org/repository/issues/?do=view_issue&issue=402 - Kerplapp already does this, we'd just need to reframe that code to also do file I/O and @SEND@ Intents.

* "Resumeable downloads?":https://f-droid.org/repository/issues/?do=view_issue&issue=393 - p2p and tor will mean lots of flaky connections

* "Repo as virtual category in client":https://f-droid.org/repository/issues/?do=view_issue&issue=262 - we will need a way to represent what is on the device on the other side of a p2p sync

* "backgrounding apk download":https://f-droid.org/repository/issues/?do=view_issue&issue=307 - downloading via Tor and OTRDATA could be slow

* "Repository list management":https://f-droid.org/repository/issues/?do=view_issue&issue=16 - adding repo via QR, etc.

* "Update all":https://f-droid.org/repository/issues/?do=view_issue&issue=36 - having _update all_ would make syncing apps in the p2p process much easier.

* "display 'category' when accessing an app":https://f-droid.org/repository/issues/?do=view_issue&issue=71 - it would be nice if the UI showed where you were getting the app from, i.e. via the p2p connection you have right now, a Tor connection, etc.

* "Update fails if a repo is broken":https://f-droid.org/repository/issues/?do=view_issue&issue=127  - we'll definitely need to handle this since we'll be adding repos that come and go a lot

* "Method for suggesting users uminstall an apk":https://f-droid.org/repository/issues/?do=view_issue&issue=144 - if an APK proves to be compromised, it should be able to be revoked and the client should recognize that