News for hackers. Stuff that matters.

A comment on Starting in August, Google will require that they sign apps, not you. Parent comment

Re:Starting in August, Google will require that they sign ap... by izacus on Sunday May 16, 2021 @06:07PM (#27177482)
Yep, Debian, Apple, F-Droid all sign binaries themselves. The posters here mostly mistakenly believe that they can fight against the owner of their operating system without replacing the whole thing.
[ Parent | on HN ]
Re:Starting in August, Google will require that they sign ap... by dbrgn on Sunday May 16, 2021 @06:34PM (#27177675)
In the case of Debian and F-Droid, they do so transparently, often with reproducible builds. The fact that packages are signed by those groups is one of the reasons why they are trusted. I would not consider "signed automatically by Google" to be an improvement in trustworthiness.

In the case of Apple, I agree. It doesn't make sense to use their ecosystem without trusting them fully.

However, in the case of Android / Google Play, right now the developers have the option to choose between APKs and App Bundles. Why take away that choice? If App Bundles are superior, then developers will choose that option freely. (Google Play is already really pushy when recommending to use App Bundles.)

[ Parent | on HN ]
Re:Starting in August, Google will require that they sign ap... by sichtlinkair on Sunday May 16, 2021 @06:33PM (#27177668)
> ... the owner of their operating system ...

I think this is exactly the bit people don't like. I don't want them to "own" my operating system.

[ Parent | on HN ]