5 ms·
Who's in charge of certificate stuff in these situations?
by dontbenebby 4y ago
Who's in charge of certificate stuff in these situations?
- gryf 4y ago
- SilasX 4y ago
- akiselev 4y agoSome intern at the corporate HQ
- dontbenebby 4y agoWhich corporation though? Samsung or GOOG?
- karamanolev 4y agoGoogle can add certificates to the CRLs (certification revocation lists) for things they control, but generally, Samsung owns and keeps their private keys, including this one.
- Izkata 4y agoI don't know if this has changed since I last looked a few years ago (around 2018-2019), but: The app-signing key can't be changed without just creating a new app, and creating a new app means you users won't be able to upgrade - they have to manually uninstall, go to the app store, and install the new one. It's not just an app store thing, I think I remember Android itself verifies that the upgrades have the same key as the old version.
- clysm 4y agoYou can do certificate rotation in signing scheme V3 and Android 9+. https://source.android.com/docs/security/features/apksigning/v3 https://source.android.com/docs/security/features/apksigning...