On Sat, Jan 14, 2012 at 8:30 AM, Oleg Gryb <[email protected]> wrote:

> Is there any way to verify an Android's application signature's
> signer? By this I mean that I need to check if an application was
> signed by an organization that I trust to and that all public
> certificates in the chain representing this organization are valid.
>

No, applications are signed by self signed certificates, not utilizing
certificate chains with public CAs as roots.

-bri

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.

Reply via email to