[kwlug-disc] Becoming Calyx/Graphene enthusiast (nut?)

[Mikalai Birukou]

Did you know about Google play store "Play App Signing": https://developer.android.com/guide/app-bundle/faq#app-signing

Developer gives his signing key to Google. Completely. Private and public parts. Or, developer may go with option 2, where you don't even see that key, which is under your developer name, but, ... Google uses it to sign.

Real use. Person of interest gets Signal update. Just this person receives these particular bytes. I mean, targeted update. Like targeted advertising. And device will check Signal's signature all right.

Why would you use Aurora, https://f-droid.org/packages/com.aurora.store/ ?
Via Tor, via Aurora, presumably anonymous connection, get to Google place with Signal update. Okay. Can one verify before install ?

Leaving in the woods is already impossible. Starlink shines everywhere. Next options are Calyx and GrapheneOS hats.

https://developer.android.com/guide/app-bundle/faq#app-signing

https://developer.android.com/guide/app-bundle/faq#app-signing

https://developer.android.com/guide/app-bundle/faq#app-signing
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20260823/095b4c0d/attachment.htm>