So, how you guys verify signatures when downloading APK on GrapheneOS ?
Discussion
Good on you for actually doing that
DeadHash (Hashsum calculation utility)
Can outsource it to fdroid or aurora
I think probably the easiest way is to verfiy the apk before first install on a computer.
Theres also https://github.com/soupslurpr/AppVerifier
FOSS Terminal CLI app from github. Then run commands from there
Again no good GUI yet
I use #Obtainium for apk managment on #GrapheneOS 👌
And when needed i use #hash-checker to verify hashes.
upload to virustotal
Sparrow wallet has a new tool