Knit 2.3.0
- Forward secrecy for direct messages and group chats, where keys are dropped as conversations progress
- Encrypted delivery receipts and reactions instead of being readable by relaying phones
- Camera feature accessible by long-pressing the attach button to take photos without leaving the chat
- Message info accessible by long-pressing a message to see delivery time and reactions
- On-device crash recording that is redacted and stored locally for manual review
- Saving a received photo to gallery no longer writes unopenable files
- Profile edits made just after first contact no longer stay invisible to the other phone for hours
From Knit
Forward secrecy for direct messages and group chats, encrypted receipts and reactions, and a camera inside the chat.
Conversations between updated phones now re-key as they go and drop the old keys, so someone who records traffic today and gets hold of a phone later cannot read the earlier messages. Group chats gain the same property. A chat with a phone on an older version keeps working, and moves over once everyone updates. Delivery receipts and reactions are now sealed too, instead of readable by any phone relaying them.
Long-press the attach button to take a photo without leaving the chat, or a message for "Message info" — when it was delivered, and who reacted with what. Crashes are now recorded on the device, redacted, for you to read and report yourself; nothing is uploaded.
Fixed: saving a received photo to your gallery wrote an unopenable file, and a profile edit made just after first contact could stay invisible to the other phone for hours.
knit-2.3.0.apk — sha256:c28adcd16bf767a7a252949b8796a2d5e9d81189fcf0605e0d6c72c36b08f601
Signed with Knit's distribution key (certificate b18a283d11797c2a84a008c1fcb9e1b864e7b4c3b301408f7a4a80624b0e631c), the key pinned in F-Droid's
AllowedAPKSigningKeys. CI verified this file is byte-identical, apart from the signature, to
an independent unsigned rebuild produced inside F-Droid's own buildserver image — so F-Droid's
rebuild-and-compare check resolves to exactly this APK.
mapping-2.3.0.txt.gz is the R8 deobfuscation map for symbolicating crash reports from this build.