Thank you. Please remind me how I can verify the integrity of the apk in the GitHub repo. Is there any checksum signed?
Discussion
How to verify integrity of the Zapstore APK:
Most convenient on desktop:
- Download the package from Github, or from cdn.zapstore.dev
- Run shasum -a 256
- Result should match the *artifact hash* in Zapstore's nostr profile
Most convenient on mobile:
- Download the package from Github, or from cdn.zapstore.dev
- Open file with the AppVerifier app (get via any other app store, or download directly!)
- Result should match the *APK certificate hash* listed in Zapstore's nostr profile