client icon indicating copy to clipboard operation
client copied to clipboard

sha?

Open yetimind opened this issue 3 years ago • 2 comments

I'd like to verify the Droid-ify .apk package downloaded from github before running it locally but cannot find your shasum. If it is on github or extenally, could you point me to it? Otherwise, if not signed, how to verify?

yetimind avatar Jul 07 '22 06:07 yetimind

SHA will be available in future updates

Iamlooker avatar Jul 09 '22 09:07 Iamlooker

@yetimind checksums are not intended to verify the authenticity of data, only its integrity. In other words, checksums only allow you to check that the data wasn't corrupted in transmission, not that the data is actually coming from its authentic source. For instance, if a malicious actor were to publish an APK with malware in it, they will only need to generate the checksum of that APK.

triallax avatar Jul 12 '22 16:07 triallax

It is available in new release

Iamlooker avatar Aug 27 '22 10:08 Iamlooker