[AppStream] Appstream ID and Flatpak

Bastien Nocera hadess at hadess.net
Mon Jan 15 15:54:41 UTC 2018


On Mon, 2018-01-15 at 16:41 +0100, Alexander Larsson wrote:
> I think ch.x29a.playitslowly is fine as long as its also used
> upstream. It doesn't quite folow the convention, which is
> unfortunate,
> but it is not a huge problem. In practice the dns conflict on x29a.ch
> is unlikely.

It's unlikely, but fast-forward a couple of years to the "Year of the
Linux desktop", and it would be a way to hijack an application ID,
similarly to how some Google Play apps and Google Chrome extensions
change hands to folks with nefarious purposes.

I think it needs to be fixed properly.


More information about the AppStream mailing list