you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago (1 child)

Is that right!? Giving up the app signing keys would allow Google to publish anything in your name. This sounds like a nightmare.
Surely there could be some equivalent to DNS confirmation by adding a key provided by Google to a txt record (or the signed app)

  • source
  • parent
  • hideshow 1 child comment