3 ms·
What happens if your key is compromised? Is there a way to continue with a new key or does everyone have to reinstall your app?
by spockz 5y ago
What happens if your key is compromised? Is there a way to continue with a new key or does everyone have to reinstall your app?
- grishka 5y agoV3 signatures do support key rotation iirc, but they're only supported by several latest Android releases. Their existence wasn't even officially announced by Google yet. So, yeah, as of right now, everyone would have to reinstall the app.
- spockz 5y agoThat seems like a very interesting attack vector. Compromise a key, have a replacement/fake ready. In the ensuing confusion you trick people to install your app.