The question is - how do you intend to verify whether an application is official... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Weetile on May 5, 2025 | parent | context | favorite | on: Technical analysis of the Signal clone used by Tru...

The question is - how do you intend to verify whether an application is official or unofficial? What's stopping the official application to be 'patched' with a fake signature feigning validity?

mmooss on May 6, 2025 [–]

Asymmetric cryptography?

Philip-J-Fry on May 6, 2025 | [–]

How? If you're validating a server, sure. But a server validating a client?

Anything you ship with the app can be extracted.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact