snapcraft.io
snapcraft.io copied to clipboard
Improve trust
Expected behaviour
As a user, I would like to have more confidence that snaps are from a legitimate source, and that the publisher is not an impersonator.
Steps to reproduce the problem
For example - Obsidian.
- Both the snap and the publisher pages are not convincing
- Anyone could have impersonated as
obsidianmd
,obsidian-md
etc. - Any verification the store team does behind the scenes is not communicated to store users
Specs
On mastodon, for example, users can choose to prove they control a certain domain.