exodus-android-app icon indicating copy to clipboard operation
exodus-android-app copied to clipboard

show the code signing certificate info

Open jawz101 opened this issue 6 years ago • 2 comments

Some apps I've found say their company is in one country yet sign their cert with another country.

Ex: https://play.google.com/store/apps/details?id=com.nekki.shadowfight3 Cyprus on Play Store, Moscow Russia in certificate, company site offered in English and Russian, game connects to .ru domains. There's nothing indicating they made this on an island in the Mediterranean.

https://reports.exodus-privacy.eu.org/reports/7214/

jawz101 avatar Apr 14 '18 17:04 jawz101

Feel free to use my code for doing this that is in Checkey:

  • https://github.com/guardianproject/checkey/blob/master/src/info/guardianproject/checkey/Utils.java

eighthave avatar Apr 16 '18 12:04 eighthave

So you would like to know the Country that's specified in the app signing certificate to know how your data will be treated? If you want to do that, you can simply read the privacy policy of the app before installing. The Google Playstore will always have it linked at the bottom of the "Read more" section for every single app that processes user data externally. I don't see the benefit in adding this to Exodus Privacy. No matter where the app was developed, or what the signing certificate says, your data will be processed according to the privacy policy that's linked in the playstore. And if you still want to know the country, you can just WHOIS the site that's hosting the privacy policy.

ItsIgnacioPortal avatar May 13 '22 04:05 ItsIgnacioPortal