I can do that tonight. I'm out and about
made a new PR
SLIP PR accepted
https://cluelessperson.com/snowblossom/bamboo/browse/SNOW-ANDROID-19 Responsible Users: Clueless <5635253+cluelessperson@users.noreply.github.com>
how are you going to handle the signing key for the .apk?
It's easy to sign them using a generic command-line approach. I did it to try out the app.
@Rotonen either fireduck or I will audit commits and manually sign releases.
I have the signing key
it is hidden in a cupboard in a castle at the top of the bean stalk
https://cluelessperson.com/snowblossom/bamboo/browse/SNOW-ANDROID-20 Responsible Users: Rana Waleed Asmat
yep, the PKI side was the bit i’m interested in
cupboard sounds legit
i guess you’ll put the pubkey up in some verifiable manner too
Google Play store does a thing where once you publish with one key they won't let you change to a different one
so really just doing what they say
yep, thus asking and poking if you’re on top of that
and good to see you only plan to distribute that way
apple land has it easier as there’s a whole per org cert chain and you can tieredly revoke and all the CSR magic happening is just hidden by xcode bugging a developer to sign in or to make a manager click a thing on the web
the google land ’lose your private key and you need to make a new org’ is quite brutal on small devs - many people have lost the ability to publish if their laptop broke
yeah
I can see that
and people like to steal those keys too, once an app is popular enough
or a crypto wallet
i guess you could sign with a ledger? :P