4 ms·
This solution is backwards compatible. Changing the installation verification process is not.
by jayd16 6y ago
This solution is backwards compatible. Changing the installation verification process is not.
- pas 6y agoWhy? They control the Play app itself anyway. Isn't verification done by the privileged "Google Play Services" special background service? Which is basically the userspace, which is where Google pushes security updates (because carriers and phone makers don't).
- jayd16 6y agoSignatures are verified at the OS level, outside the playstore. Even if you side load apps, signatures are checked for consistency.
- remram 6y agoI'm not suggesting we remove signing, just that Google use their own signing key for apps they build.
- jayd16 6y agoThat won't work. For google to take over the signing of existing apps they need the existing keys.
- remram 6y agoI see, so the limitation is that app updates have to keep using the same key, and that's enforced by the OS? Couldn't the Play Store uninstall then reinstall in that situation, to update to the new key?
- codeflo 6y agoSo Google’s inability to update Android causes them to compromise on its security?
- jayd16 6y agoGoogle imposing their own root keys on every device seems like a much much bigger overreach than wanting to repackage apps in their store.
- remram 6y agoIs it? They control the store, which can install apps remotely, and most developers are handing them their private keys for convenience. You also have to trust that Google gave you the right one every time you install a new app. What is the practical advantage of having apps signed by long-lived keys that were handed to Google without your knowledge over a Google key bundled with the store? Either way, you keep the same option of installing an alternate store like F-Droid or downloading APKs if you don't trust Google.