Join Nostr
2025-11-06 08:08:50 GMT
in reply to

Dikaios1517 on Nostr: No. All apps on Zapstore are signed with Nostr keys. Either the developer's keys or ...

No. All apps on Zapstore are signed with Nostr keys. Either the developer's keys or Zapstore's keys. This allows you to be very confident that what you are downloading is the legitimate app released by that developer, when they are signing their own app releases.

Not sure what, if anything, is used for signing apps on Play Store, but it certainly won't be the same as the Nostr key used to sign the app on the Zapstore.

If you installed the app from the Play Store originally, Zapstore will tell you that the keys don't match if you try to update it there. You will first need to uninstall the Play Store version of the app.

And I agree that Zapstore signing many of the apps is not ideal, but that is because those devs haven't taken on the responsibility of signing their app releases. In the case of Nostr apps, they may just not be aware of how to do so, or that they should do so. In the case of other apps, their devs may not even be aware that Nostr exists, or care to use it, but Zapstore still wants to have the app available for folks to install.

Otherwise, Zapstore wouldn't have many apps available at all if it was only apps that devs were signing for themselves.