On top of verifying the APK's signature, it would be useful to show the signing certificate details as well.
For example, to check if the app is signed by F-Droid or the developer.
F-Droid reproducible builds are signed by the developer's keys, but non-reproducible builds are signed by F-Droid's, there is no way to check who signed it without checking the signing certificate details.
This can already be achieved with apksigner verify --print-certs /path/to/app.apk on the command-line, but having this feature in AppVerifier could make it simpler to use directly on the device.
On top of verifying the APK's signature, it would be useful to show the signing certificate details as well.
For example, to check if the app is signed by F-Droid or the developer.
This can already be achieved with
apksigner verify --print-certs /path/to/app.apkon the command-line, but having this feature in AppVerifier could make it simpler to use directly on the device.