Then what's the point of signing? To make sure another app cannot use the
same package name and thus overwrite my app?

Thanks

On Tue, Feb 10, 2009 at 5:38 PM, Dianne Hackborn <[email protected]>wrote:

> Android doesn't use CAs at all, period.  It makes no difference whether you
> self-sign or use a CA, the system and user will never know the difference.
>
>
> On Tue, Feb 10, 2009 at 4:53 PM, Mattaku Betsujin <
> [email protected]> wrote:
>
>> Hi,
>>
>> If I go cheap and don't pay the $xx or so for a real VerifySign
>> certificate, and just use a self-signed certificate to sign my app, will it
>> appear as a second-class citizen on the Android Market?
>>
>> Specially, will the user get a prompt like "this app is signed by a
>> possibly untrustyworthy scheming bastard, do you still want to risk your
>> life install it"?
>>
>> If not now, will such a policy be enforced in the future?
>>
>> Thanks
>> - Mattaku
>>
>>
>>
>
>
> --
> Dianne Hackborn
> Android framework engineer
> [email protected]
>
> Note: please don't send private questions to me, as I don't have time to
> provide private support.  All such questions should be posted on public
> forums, where I and others can see and answer them.
>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to