On Sat, Jan 18, 2014 at 12:45 AM, Russell Wheeler <[email protected]> wrote:
> > Am I right in not giving out these security details, or being a little > paranoid as only having one will always prevent malicious use as you'd need > the other. Yes. > > Or can they > > 1) create an app and I resign it They can simply give you an unsigned APK. Better yet, source code so you can build it yourself. > 2) sign it with a different key and we still upload it to our play account > This works too, but you can never be sure that they didn't keep a copy of the key. -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en --- You received this message because you are subscribed to the Google Groups "Android Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.

