Warning or opt-out for unverified snaps #1871
Description
Is there an existing issue for this?
- I have searched the existing issues and found none matching what I'm reporting.
Is the feature related to a problem or existing issue?
Cases of malware in the snap store:
- https://popey.com/blog/2024/02/exodus-bitcoin-wallet-490k-swindle/
- https://forum.snapcraft.io/t/temporary-suspension-of-automatic-snap-registration-following-security-incident/37077
General suggestions to improve (user-side) security:
Describe the feature, why the feature matters to you, and what benefits the feature will bring about.
Users, specially new users and those unfamiliar with the Ubuntu ecosystem, are likely to use the app center without fully understanding that anyone can publish a snap, or the difference between a snap and a Debian package. When searching for any string, the app center suggests Snap packages, whether they are verified or not, and places before the Debian packages. In many cases, the search results both in a Debian package and in a unverified Snap package, and the inexperienced user is likely to choose the unverified snap without understanding the risks.
Describe any alternatives you've considered.
Several measures could alleviate the risks:
- At minimum, the app center should give a clear warning that a snap publisher is unverified. A missing green badge is not a warning.
- It could indicate whether the app can be traced back to the source code (see related).
- There could be an option to opt out of snaps from unverified publishers (or even better, an opt-in, with a dialog on first-execution).
Additional context
No response