Follow

@marathon Absolutely not no. That is definitely not how this works. That wouldn't verify the signature anyway, just verify that the download wasn't corrupted.
The hash on the site is the hash of the *signature* of the apk contents (sans the signature/manifest files.)

You can read this as a good starting point: github.com/patrickfav/uber-apk

Sign in to participate in the conversation
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.