top | item 43900277

(no title)

Weetile | 10 months ago

The question is - how do you intend to verify whether an application is official or unofficial? What's stopping the official application to be 'patched' with a fake signature feigning validity?

discuss

order

mmooss|10 months ago

Asymmetric cryptography?

Philip-J-Fry|10 months ago

How? If you're validating a server, sure. But a server validating a client?

Anything you ship with the app can be extracted.