Re: Why does open source software include a "signing key"?

From	"R.Wieser" <address@is.invalid>
Newsgroups	comp.mobile.android
Subject	Re: Why does open source software include a "signing key"?
Date	2025-03-07 14:58 +0100
Organization	A noiseless patient Spider
Message-ID	<vqeu2i$3ilcc$1@dont-email.me> (permalink)
References	(7 earlier) <m2tbqeF6l2mU4@mid.individual.net> <vqc0us$2v1pf$1@dont-email.me> <m2vnfjFhmqeU1@mid.individual.net> <vqec1d$3f0vr$1@dont-email.me> <m30b4vFkj1jU2@mid.individual.net>

Show all headers | View raw

Arno,

> But F-Droid has no proof who the person is,

And you think that Google does ?    Why ?

> where they get the sources from.

And you think that Google does ?   Or even cares ?

As I already mentioned, if I may take security firm reporting on Googles 
"walled garden", it has got quite a number of poisonned apps floating 
around.  And than I won't even mention the ones that where good, but got 
sold lock-stock-and-barrel to nevarious players, which than created 
"updates" that are trojanned.

So do yourself a favour, and do not think that an unbroken certificate chain 
meants all is on the up-and-up.   It just means that nothing has changed in 
transport.

I think this discussion has run its course.  If you have nothing extra 
forward regarding the usage of app cerificates I think we can stop here.

Regards,
Rudy Wieser

Back to comp.mobile.android | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-02-26 21:36 +0000
  Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-02-26 21:44 +0000
    Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-02-26 22:36 +0000
  Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-02-28 08:43 +0100
    Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-02-28 19:30 +0000
      Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-02-28 19:46 +0000
        Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-02-28 21:42 +0100
  Re: Why does open source software include a "signing key"? Arno Welzel <usenet@arnowelzel.de> - 2025-02-28 09:01 +0100
    Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-02-28 19:19 +0000
      Re: Why does open source software include a "signing key"? Arno Welzel <usenet@arnowelzel.de> - 2025-03-01 10:00 +0100
        Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-03-01 09:54 +0000
          Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-03-01 10:12 +0000
            Re: Why does open source software include a "signing key"? Marion <marion@facts.com> - 2025-03-01 10:27 +0000
            Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-03-01 11:44 +0100
        Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-03-01 11:36 +0100
          Re: Why does open source software include a "signing key"? Arno Welzel <usenet@arnowelzel.de> - 2025-03-01 14:22 +0100
            Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-03-01 15:40 +0100
              Re: Why does open source software include a "signing key"? Arno Welzel <usenet@arnowelzel.de> - 2025-03-06 11:30 +0100
                Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-03-06 12:29 +0100
                Re: Why does open source software include a "signing key"? Arno Welzel <usenet@arnowelzel.de> - 2025-03-07 09:01 +0100
                Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-03-07 09:50 +0100
                Re: Why does open source software include a "signing key"? Arno Welzel <usenet@arnowelzel.de> - 2025-03-07 14:37 +0100
                Re: Why does open source software include a "signing key"? "R.Wieser" <address@is.invalid> - 2025-03-07 14:58 +0100

csiph-web