> if I remember well it entails signing with the new signature a version signed with the old one, so it's complex. Wait no of course it's the opposite, specifi

> if I remember well it entails signing with the new signature a version signed with the old one, so it's complex. Wait no of course it's the opposite, specifically you sign the new certificate with the old key, if I understood it right (https://source.android.com/docs/security/features/apksigning/v3#proof-of-rotation-and-self-trusted-old-certs-structs https://source.android.com/docs/security/features/apksigning...)