Hacker News Reader

Because I prefer sticking to APKs signed by the author of the app. F-Droid APKs are signed with different keys, typically.

View on HN

I agree with your sentiment in theory. Unfortunately, in practice, Google Play Store rips off my signature after I upload and sticks their own one on instead. Blah.

Huh, isn't that only the case for Android App Bundles?

Only if the app is enrolled to their resigning program, requires either initial agreement or signing key upload.

I thought that was opt-in still (https://support.google.com/googleplay/android-developer/answ...) unless you use app bundles, but that article makes it sound like you can bring your own key too. Do they still modify the signature in that case?

Typically but not necessarily. F-Droid can distribute apps with original signatures from developers if the app builds reproducibly. See: https://f-droid.org/en/docs/Reproducible_Builds/

Reply on news.ycombinator.com