Replying to Avatar b'TC.py

When it's not possible for me to install an app directly from source (e.g. through obtainium), I'm using the aurora store (all the play store apps are there as well, but the store itself - the front end - is FOSS, the backend is downloading the apks from the google servers like the play store). All apps so far worked perfectly well. I didn't touch the play store for a long time now. Never regretted the switch to #grapheneOS
Avatar
Alejandro 1y ago

Thanks! How do you check the integrity of the packages downloaded from the aurora store?

Reply to this note

Please Login to reply.

Discussion

Avatar
b'TC.py 1y ago

It's a valid concern I don't have a solition for. In theory you could be man-in-the-middle attacked without noticing or the apk provided to the Google back end could be malicous. I only download apps I "know" and use anonymous Aurora Store Sessions - I'm not aware that Aurora Store ever pointed someone somewhere else than to the Google back end.

FAQ can be found here:

https://aurora-oss.vercel.app/faq/#aurora-services