208
Google deleted an open source app I love (install from F-Droid) for being "Fake" (lemmy.ml)
submitted 2 years ago by to c/assholedesign@lemmy.world
36 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 27 points 2 years ago (1 child)

On the other hand it's a valid case to have the app installed by means other than the play store. I can't imagine they have found this discrepancy in signatures for the first time.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Probably most other apps are correctly signed with the same certificate on both sites.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    No they are not: F-Droid builds a signs the apps independently. Source: I have apps on both stores.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    You can actually sign the F-Droid app yourself, if you use reproducible builds.

    There's reasonable odds the signatures still won't match though, because Google requires App Bundles now, and then they build and sign the APK, rather than allowing the developer to build and sign their own APK.

    Technically you can use the same key (see "Best Practices" of this page), but it's kind of shady, and requires giving your private key to Google.

  • permalink
  • fedilink
  • source
  • parent