diff options
Diffstat (limited to 'site/downloads.html')
| -rw-r--r-- | site/downloads.html | 83 |
1 files changed, 66 insertions, 17 deletions
diff --git a/site/downloads.html b/site/downloads.html index 7602fdb..f231a25 100644 --- a/site/downloads.html +++ b/site/downloads.html @@ -4,7 +4,7 @@ <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Downloads — MeshBay</title> - <link rel="stylesheet" href="/site/assets/site.css"> + <link rel="stylesheet" href="/assets/site.css"> </head> <body> @@ -20,34 +20,83 @@ <div class="page"> <h1>Downloads</h1> - <p>MeshBay packages will be available through standard package managers. - Package repositories are being set up.</p> + <p><strong>No packages are published yet.</strong> This page describes what is + coming and how you will be able to check that what you install is what we + published. Until a signing key is published here, nothing on this page is a + download link.</p> - <h2>Web Client</h2> - <p>No installation needed. Open the - <a href="/app">web app</a> in any modern browser (Chrome, Firefox, Edge, Safari).</p> + <h2>Web client — available now</h2> + <p>Nothing to install. Open the <a href="/app">web app</a> in a modern browser. + Tested on Chrome and Firefox; Edge and Safari are expected to work.</p> + <p>Be aware of what this costs you: <strong>the web client's code is served by + this hub</strong>. A hub operator who wanted to read your content could do it + by serving you modified code, and no protocol design prevents that. It is the + convenience tier, not the secure tier. Everything else — your files, your + group keys, your messages — is unreadable to the hub, and the desktop client + below removes this last exception by shipping its code with the application + instead of receiving it from us.</p> + + <h2>Desktop client — in development</h2> + <p>A desktop application that ships its own interface, keeps your keys on your + own machine, and can install and manage a node running on that machine. It + will not replace the web client: the same account works with both, on as many + devices as you like.</p> + + <table class="pkg-table"> + <thead> + <tr><th>Platform</th><th>Format</th><th>Status</th></tr> + </thead> + <tbody> + <tr><td>Ubuntu 24.04+</td><td>DEB, apt repository</td><td>In development</td></tr> + <tr><td>Fedora 44+</td><td>RPM, dnf repository</td><td>In development</td></tr> + <tr><td>Windows 10+</td><td>MSI (per-user, no administrator rights)</td><td>Planned, after Linux</td></tr> + </tbody> + </table> + + <p>Updates will come through your distribution's package manager rather than a + built-in updater, so your system verifies the signature the same way it does + for every other package you have installed.</p> + + <h2>Server packages — in development</h2> + <p>You do not need these to use MeshBay. They are for running your own node — the + machine that stores and serves your group's files — or your own hub.</p> - <h2>Server Packages</h2> <table class="pkg-table"> <thead> <tr><th>Package</th><th>Platform</th><th>Status</th></tr> </thead> <tbody> - <tr><td>meshbay-hub</td><td>Fedora / RHEL (RPM)</td><td>Coming soon</td></tr> - <tr><td>meshbay-hub</td><td>Ubuntu / Debian (DEB)</td><td>Coming soon</td></tr> - <tr><td>meshbay-node</td><td>Fedora / RHEL (RPM)</td><td>Coming soon</td></tr> - <tr><td>meshbay-node</td><td>Ubuntu / Debian (DEB)</td><td>Coming soon</td></tr> + <tr><td>meshbay-node</td><td>Fedora / RHEL (RPM)</td><td>In development</td></tr> + <tr><td>meshbay-node</td><td>Ubuntu / Debian (DEB)</td><td>In development</td></tr> + <tr><td>meshbay-hub</td><td>Fedora / RHEL (RPM)</td><td>In development</td></tr> + <tr><td>meshbay-hub</td><td>Ubuntu / Debian (DEB)</td><td>In development</td></tr> </tbody> </table> - <h2>Android</h2> - <p>An Android client is planned. It will be available as an APK download - and eventually on F-Droid.</p> + <p>A node runs as a normal user account, not as root, and it stores its data + under that user's home directory. Running one on your own desktop needs no + administrator rights; running one on a server is an ordinary system service. + Python 3.12 or later is required.</p> + + <h2>Android — planned</h2> + <p>An Android client is planned. It will be distributed as an APK from this site, + and on F-Droid if the project's requirements can be met.</p> + + <h2>Verifying what you download</h2> + <p>Packages will be signed, and the repositories will be signed. That protects + you against everyone <em>except</em> whoever controls this website — including + us. If this site were compromised, it could serve you a modified package + <em>and</em> a matching fingerprint on this page, and both would look correct.</p> + <p>So the signing key's fingerprint will also be published somewhere this website + does not control, and you should compare the two before trusting a package. + The locations will be listed here once the key exists.</p> + <p>We would rather say this plainly than let a page of checksums imply a guarantee + it cannot give.</p> - <h2>Source Code</h2> + <h2>Source code</h2> <p>Clone the repository from - <a href="https://github.com/cbesson/meshbay">GitHub</a> - and follow the instructions in the README.</p> + <a href="https://github.com/cbesson/meshbay">GitHub</a> and follow the README. + Building from source is the one path that depends on nothing published here.</p> </div> <footer class="site-footer"> |