By signing the hash it's obvious they and only they acknowledge the .apk, .zip? Am I stupid?
If I could rephrase my Q would be:
- if its good enough to sign the apk/zip, why signing a hash? Isnt it an extra step?
Please Login to reply.
nostr:npub1f3fvhppwgh00u2r0kq320avr984wf6wrupm6f98m4nyqfk0s28dqq03ny6 puso la respuesta correcta AFAIK. Stupid I am.
Esta resouesta de Santochi en X me parece interesante