4 ms·
My understanding is that with v3 google started requiring that app developers send their private keys to google, as a requirement for inclusion in the play stor
by nullc 4y ago
My understanding is that with v3 google started requiring that app developers send their private keys to google, as a requirement for inclusion in the play store (using the 'Play Encrypt Private Key (PEPK) tool').
In light of that I guess it wouldn't be shocking if there were similar requirements for vendor's platform keys.
- marumari 4y agoPlatform keys are only required to be v2, as far as my understanding goes.
- MishaalRahman 4y agoYeah that's the minimum since Android 11 for system apps targeting API level 30+.
- strcat 4y agoThis is about non-Google OEM OS signing keys. v1/v2/v3 APK signing has nothing to do with the Play Store requiring Play Signing for newly published apps. App bundles / split APKs also don't inherently have to be used the way they're using them. Entirely possible to use them outside the Play Store with your own signing keys. v3 signing is just v2 with key rotation support. v2 is proper whole file signing instead of v1 which was just the flawed JAR signing system.