Hacker News new | past | comments | ask | show | jobs | submit login

If someone replaces the APK on their website with a compromised one, what prevents them from replacing the PGP signature with a signature created by the attacker?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: