3 ms·

In the Play Store. Kinda a key detail. You can still sign your own packages on alternate stores or from your website.

• slim 5y ago
  It's not a detail. Google could easily change my app. I can't verify it's the app I compiled
  • jhasse 5y ago
    They can do that already. The Play Store has root.
    • asddubs 5y ago
      this is a lot more subtle though. I wonder what the legalities are of the government asking google to add in a backdoor that spoofs an app at runtime. certainly it's more complicated than just delivering an app provided by the government as a replacement for one on the app store
    • cesarb 5y ago
      > The Play Store has root. AFAIK, no, it doesn't; the component which has root is part of the operating system image, and the Play Store merely has the permissions to tell that component to silently install or upgrade a package. However, when upgrading a package, that component will only allow the upgrade if the package is signed by the same key as the previous release. This has more than once led to a package no longer being able to be updated, because the developer was not careful enough with backups and lost the private key.
• bogwog 5y ago
  > You can still sign your own packages on alternate stores or from your website. Not if you want customers.