“apkeep,” EFF's new APK Downloader
eff.org
eff.org
Will it allow the app developers to sign releases, and will it check the signature when an APK is downloaded? Ideally these third-party mirrors would also support binary transparency, using a system like this: