flathub icon indicating copy to clipboard operation
flathub copied to clipboard

Manually verify de.desy.constellation

Open stephanlachnit opened this issue 7 months ago • 7 comments

I would like to verify de.desy.constellation - unfortunately, our IT department is not able to upload the required file to https://desy.de/.well-known/org.flathub.VerifiedApps.txt for reasons that go beyond the scope of this issue. They did add the file to https://resource.desy.de/.well-known/org.flathub.VerifiedApps.txt however.

Some context: we are a large scientific institute and not really a software company, so I doubt there will be other ways to prove control over the root domain using e.g. DNS entries.

If possible, I would like to manually verify the app. I can provide proof for my employment and also provide a list of talks/publications which connect the project with our institute.

stephanlachnit avatar Apr 24 '25 10:04 stephanlachnit

our IT department is not able to upload the required file to https://desy.de/.well-known/org.flathub.VerifiedApps.txt for reasons that go beyond the scope of this issue.

Sounds like your IT department's problem.

You acknowledged in the PR

Image

and the link had this line since last year (before the submission was done)

Image

bbhtt avatar Apr 24 '25 10:04 bbhtt

Sounds like your IT department's problem.

If no manual verification is possible that's fine, please just close the issue.

You acknowledged in the PR

Well I guess this was a bit of a misinterpretation from my side. If by "control the domain" this means I have full power over the domain by myself, then yes I was wrong. But this isn't a random domain by a random person that I have no connections to. And unfortunately full control over a domain a bit unrealistic for larger institutions.

stephanlachnit avatar Apr 24 '25 11:04 stephanlachnit

No, it's possible. But this should've been set and done at the submission stage when everything is written in the docs for people to go through.

bbhtt avatar Apr 24 '25 11:04 bbhtt

Right, that's on me, sorry. Maybe it's worth rephrasing the checkbox to

The application id guidelines are followed and the domain used for the application ID is controlled by the application developer(s). In case of doubt please specify:

to encourage giving more details in non trivial situations?

stephanlachnit avatar Apr 24 '25 12:04 stephanlachnit

No, you are encouraged to follow the links.

"In case of doubt ask questions" holds for anything.

bbhtt avatar Apr 24 '25 12:04 bbhtt

No, you are encouraged to follow the links.

I mean whatever, it's your documentation and I don't care, but at least I did read through all the links (and the entire documentation which is excellent in general) and still figured "it's probably fine".

stephanlachnit avatar Apr 24 '25 13:04 stephanlachnit

It's not docs, making the checklist longer will be a net negative as some people automatically skip past them which is why things are explained in detail on the docs site. (It was longer before, I made it concise so that making the PR easier.)

If anyone has questions about any requirements during or before submission they can ask in the PR itself, by issue or by discourse or by chat. That's also mentioned in the tip here:

Image

bbhtt avatar Apr 24 '25 16:04 bbhtt

Can you try verifying now?

bbhtt avatar Aug 21 '25 15:08 bbhtt

Managed to verify it, thx!

stephanlachnit avatar Aug 21 '25 18:08 stephanlachnit