Conversation

APKs can be end-to-end signed with keys under developer control. You can move between app stores or no store (data is preserved on update with same key). And Google can't fuck with it. (Well, they can fuck with the entirety of the rest of the phone, so that point's kinda moot.)
1
4
App bundles aren't a Play Store exclusive feature and using them as part of the infrastructure for building releases of apps doesn't preclude distribution of apks signed by developer keys. An app bundle is used to generate specialized apks. The developer could be generating them.
2
2
Replying to
For the Play Store, the Play Store generates the apk and signs it, so they control the signing key. For existing apps, the developer still has the key too and the system supports key rotation so you could start releasing upgrades outside Play with the key rotated away from that.
1
1
Replying to and
You just pass the bundle to bundletool and generate either 1 universal apk or assorted apks as Google does. It's unrealistic to support as many varieties if you actually have to upload them all as apk variants to some store but you can still get substantial space savings from it.
1
1
Replying to and
My issue is with so many apps choosing to only distribute the apps via the Play Store and choosing to have hard dependencies on Play services. That's what it is unhealthy. I have zero issue with some stores signing apps and other stores distributing developer-signed ones.
1
2
Show replies