4 ms·
Yes, but the payload to check here is the diff, not the full APK. What happens today is that the diff is verified, then applied, then the full APK checksum is
by rakoo 10y ago
Yes, but the payload to check here is the diff, not the full APK.
What happens today is that the diff is verified, then applied, then the full APK checksum is verified. So the diff is checked before being applied; whether the checksum is verified at APK level or at file level, we have passed the signature checking.
- vog 10y agoBut the original question was whether the signature check should happen after applying the patch instead of before, and the answer is clearly "No!". You can and should clearly do both, but if you'd have to decide either-or, always verify first, as early as possible.