top | item 43269003

(no title)

thecrash | 1 year ago

Builds are signed by the software publisher, not the Play Store. So the store alone couldn't corrupt releases, it would need collaboration by the publisher. (Google does have a service for app developers where they keep and manage your signing keys for you, but it's not required)

discuss

order

balamatom|1 year ago

Interesting! Who checks those signatures?