Is this genuine: https://signal.org/android/apk/
I was guided to it by people that supposedly knows a lot about computer
security and privacy. If it is real, how do I check if the sha256 fingerprint
matches?
I got this
$ sha256sum Signal-website-release-4.6.1.apk
bd03325fe6f9ed50acf1ede210b8de7114f1aebd67528daece71d49c75ba2684
Signal-website-release-4.6.1.apk
which is a different kind of format that the fingerprint posted on the site:
29:F3:4E:5F:27:F2:11:B4:24:BC:5B:F9:D6:71:62:C0
EA:FB:A2:DA:35:AF:35:C1:64:16:FC:44:62:76:BA:26
