VideoLAN @videolan App Stores were a mistake. Currently, we cannot update VLC on Windows Store, and we cannot update VLC on Android Play Store, without reducing security or dropping a lot of users... For now, iOS App Store still allows us to ship for iOS9, but until when?

you are viewing a single comment's thread
view the rest of the comments
[–] 89 points 2 years ago (3 children)

Google requiring their private signing key is insane, and goes completely against the concept of private/public keys.

Why is Google asking for this?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 26 points 2 years ago* (last edited 2 years ago)

    C-I-A Confidentiality, Integrity, Accessibility. They don't need the keys for C or A. Only one option remains. To modify the code and pass it off as code VLC wrote or signed off on.

    Likely to install malware and re-sign. Brazen identity theft.

    Maybe I'm wrong, they could use VLC's private keys to gobble encrypted communications too.

  • source
  • parent