Hacker News new | ask | show | jobs
by thecrash 471 days ago
Builds are signed by the software publisher, not the Play Store. So the store alone couldn't corrupt releases, it would need collaboration by the publisher. (Google does have a service for app developers where they keep and manage your signing keys for you, but it's not required)
1 comments

Interesting! Who checks those signatures?