PGP Signature verification for downloaded APKs

Open gim- opened this issue 3 months ago • 1 comments

Would be really great to have automatic PGP signature verification as part of the install process as extra integrity check.

Sep 25 '25 20:09 gim-

I'm not 100% sure how to do this, though there seems to be a go library that can help with this https://github.com/ProtonMail/gopenpgp#detached-and-inline-signatures, so I'll see what I can do.

Nov 17 '25 02:11 Hoverth