3 ms·

https://developer.android.com/studio/publish/app-signing https://developer.android.com/studio/publish/app-signing It seems this is only required for "Android A

by dheera 6y ago

https://developer.android.com/studio/publish/app-signing https://developer.android.com/studio/publish/app-signing It seems this is only required for "Android App Bundles", whatever the hell that is, and not apps. "Android requires that all APKs be digitally signed with a certificate before they are installed on a device or updated. If you use Android App Bundles, you need to sign only your app bundle before you upload it to the Play Console, and Play App Signing takes care of the rest. However, you can also manually sign your app for upload to Google Play and other app stores." "And, because app bundles defer building and signing APKs to the Google Play Store, you need to opt in to Play App Signing before you upload your app bundle."

GauntletWizard 6y ago
As of August, the play store only accepts "Android App Bundles"; "From August 2021, new apps will be required to publish with the Android App Bundle on Google Play"[1] [1] https://developer.android.com/guide/app-bundle https://developer.android.com/guide/app-bundle
throwuxiytayq 6y ago
Yes, that's apps. https://developer.android.com/distribute/play-policies#RequirementForNewApps https://developer.android.com/distribute/play-policies#Requi... "Android App Bundle requirement for new apps and games" "After August 2021, all new apps and games will be required to publish with the Android App Bundle format. New apps and games must use Play Asset Delivery or Play Feature Delivery to deliver assets or features that exceed a download size of 150MB."
- dheera 6y ago
  Okay, shit.
deleted 6y ago
[deleted]
jeroenhd 6y ago
Looks to me like you can still opt out of uploading your keys to Google [1]. You can't opt out of Google-side signing after opting in, though. That does make kind of sense, because once you hand over your key and the first user installs your app, you need to use the same key or the user wouldn't be able to update the app. Opting out of Google-side app signing would be kind of useless because Google can keep the keys and sign malicious code in your name regardless, unless you're willing to wipe out your entire install base through a new app. [1] https://developer.android.com/studio/publish/app-signing#opt-out https://developer.android.com/studio/publish/app-signing#opt...
- saurik 6y ago
  ...only until August, which is the entire point of this post. The very documentation you link to says "Additionally, your app will not be able to support Android App Bundles, Play Feature Delivery and Play Asset Delivery."; but, starting in August, all new apps must use bundles, and thereby will no longer be compatible with opting out of sending Google your signing key.

by dheera 6y ago

GauntletWizard 6y ago

As of August, the play store only accepts "Android App Bundles"; "From August 2021, new apps will be required to publish with the Android App Bundle on Google Play"[1] [1] https://developer.android.com/guide/app-bundle https://developer.android.com/guide/app-bundle

throwuxiytayq 6y ago

Yes, that's apps. https://developer.android.com/distribute/play-policies#RequirementForNewApps https://developer.android.com/distribute/play-policies#Requi... "Android App Bundle requirement for new apps and games" "After August 2021, all new apps and games will be required to publish with the Android App Bundle format. New apps and games must use Play Asset Delivery or Play Feature Delivery to deliver assets or features that exceed a download size of 150MB."

dheera 6y ago
Okay, shit.

deleted 6y ago

[deleted]

jeroenhd 6y ago

Looks to me like you can still opt out of uploading your keys to Google [1]. You can't opt out of Google-side signing after opting in, though. That does make kind of sense, because once you hand over your key and the first user installs your app, you need to use the same key or the user wouldn't be able to update the app. Opting out of Google-side app signing would be kind of useless because Google can keep the keys and sign malicious code in your name regardless, unless you're willing to wipe out your entire install base through a new app. [1] https://developer.android.com/studio/publish/app-signing#opt-out https://developer.android.com/studio/publish/app-signing#opt...

saurik 6y ago
...only until August, which is the entire point of this post. The very documentation you link to says "Additionally, your app will not be able to support Android App Bundles, Play Feature Delivery and Play Asset Delivery."; but, starting in August, all new apps must use bundles, and thereby will no longer be compatible with opting out of sending Google your signing key.