A third party application can't impose less or more restriction than the
platform's signing rules, which I believe are documented in the SDK
documentation.

You should not sign an app with multiple certs.  Only use one.

On Sun, Dec 12, 2010 at 8:49 PM, Nitin Mahajan <[email protected]> wrote:

> In cryptography terms I want to achieve "Confidentiality" as well as
> "Authenticity" both with .apk installation. Please let me know if that is
> possible without, modifying android code.
>
> Is there a way to sign a application with multiple keys? One key which is
> developers private key and another which is device owners public key?
>
> regards
> -Nitin
>
>
> On Mon, Dec 13, 2010 at 10:16 AM, Nitin Mahajan <[email protected]>wrote:
>
>> Hello,
>>
>> I have some queries regarding app installation on a Android devices. I did
>> got though the link
>> http://developer.android.com/guide/publishing/app-signing.html#cert.
>>
>> 1. Is there a way to control which applications can get installed on a
>> particular device? I mean apps signed with a particular key only should be
>> allowed.
>>
>> 2. The ability to control that a .apk, can be installed only on a device,
>> which posses the corresponding public key is already there in Android 2.2.
>> Please let me know if this understanding of mine is correct and whether the
>> app installer automatically takes care of it?
>>
>> regards
>> -Nitin
>>
>>
>>
>  --
> You received this message because you are subscribed to the Google
> Groups "Android Developers" group.
> To post to this group, send email to [email protected]
> To unsubscribe from this group, send email to
> [email protected]<android-developers%[email protected]>
> For more options, visit this group at
> http://groups.google.com/group/android-developers?hl=en
>



-- 
Dianne Hackborn
Android framework engineer
[email protected]

Note: please don't send private questions to me, as I don't have time to
provide private support, and so won't reply to such e-mails.  All such
questions should be posted on public forums, where I and others can see and
answer them.

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to