Replying to Avatar Vitor Pamplona

Makes sense, but I am not sure if the trade off is that much. In the PlayStore, you have to TRUST Google to not fuck around in first-time installs. There is no first install check in the PlayStore as well for those attack vectors.
Avatar
sommerfeld 1y ago

Have you heard of https://github.com/soupslurpr/AppVerifier ?

It's at least an attempt to have a sort of community run trusted attested developer keyring. Obtainium was considering some kind of integration

Reply to this note

Please Login to reply.

Discussion

No replies yet.