3 ms·
Red herring. Self-signed certificates have always been accepted, and generating a certificate is a one-liner: keytool -genkeypair -keystore mykey.jks -alia
by noname120 11mo ago
Red herring. Self-signed certificates have always been accepted, and generating a certificate is a one-liner:
keytool -genkeypair -keystore mykey.jks -alias myalias -keyalg RSA
The public testkey certificate is also accepted so you don’t even need to generate one.
- NoGravitas 11mo agoYes, but then when you update the app, it has to be signed with the same certificate. Android effectively uses TOFU for apk signatures.