Hacker News Reader

You're right. When we found out the potential for this we removed all the checks and our apps are effectively free to download. We only make money through in-app purchases and advertising. it would be a piss-poor user experience if the app would suddenly crash upon launch because some certificate expired.

View on HN

But aren't you still using the certificate to validate the receipt to find out which in-app purchases have been made?

If so, wouldn't you have to validate receipts against a new certificate once the old one expires?

Once the receipts for in-app purchases are validated, they don't need to be validated again every time. It's true that people wouldn't be able to make new in-app purchases (unless we have another payment processor as a backup). But at least their app will WORK! And we'll be able to communicate to them how to refresh the certificate and be able to make in-app purchases.

Reply on news.ycombinator.com