List Signing Certificate Fingerprint to Let Users Verify the Downloaded APK #24
Description
Is your feature request related to a problem? Please describe.
Hello! I've just become a paying customer and I would like to download this app using Obtanium and also I would like to make sure that the app I install is indeed the correct one. To do so I use AppVerifier. To be able to check whether the app downloaded is indeed from the developer I would need the hash of the signing certificate used to sign the app.
Describe the solution you'd like
The hash would be listed preferably on an external site. Like the app's site, but it could also be listed on Github if the external site is not an option.
Describe alternatives you've considered
I've also considered getting the app from Google Play or just hoping that I have indeed acquired the app from the developer. Neither option really resolves the issue for me.
Additional context
It's slowly becoming a standard security practice to list the key's hash somewhere in your project for example: Thunderbird, Molly, AuroraStore, GeoShare.