Then what's the point of signing? To make sure another app cannot use the same package name and thus overwrite my app?
Thanks On Tue, Feb 10, 2009 at 5:38 PM, Dianne Hackborn <[email protected]>wrote: > Android doesn't use CAs at all, period. It makes no difference whether you > self-sign or use a CA, the system and user will never know the difference. > > > On Tue, Feb 10, 2009 at 4:53 PM, Mattaku Betsujin < > [email protected]> wrote: > >> Hi, >> >> If I go cheap and don't pay the $xx or so for a real VerifySign >> certificate, and just use a self-signed certificate to sign my app, will it >> appear as a second-class citizen on the Android Market? >> >> Specially, will the user get a prompt like "this app is signed by a >> possibly untrustyworthy scheming bastard, do you still want to risk your >> life install it"? >> >> If not now, will such a policy be enforced in the future? >> >> Thanks >> - Mattaku >> >> >> > > > -- > Dianne Hackborn > Android framework engineer > [email protected] > > Note: please don't send private questions to me, as I don't have time to > provide private support. All such questions should be posted on public > forums, where I and others can see and answer them. > > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en -~----------~----~----~----~------~----~------~--~---

