• Home
  • Apps
  • Apps News
  • Google Mandates APK Security Metadata for Peer-to-Peer Authentication

Google Mandates APK Security Metadata for Peer-to-Peer Authentication

 
Share on Facebook Tweet Share Share Reddit Comment
Google Mandates APK Security Metadata for Peer-to-Peer Authentication

Highlights

  • Google will now be adding security metadata on top of each APK
  • This is to verify that it was distributed by Google Play
  • This opens up a secure offline channel gaining for developers

In a bid to improve security, Google is now adding security metadata to APKs to help with app authenticity. This is especially important in areas where APKs are transferred peer-to-peer. This security metadata will help Google verify app authenticity, and manage app updates in the future. The tech giant had last year announced app security and performance changes for developers on Google Play. These changes included requiring new apps and updates to existing apps to target the most recent Android API level, compulsory 64-bit app versions by 2019, and addition of security metadata to each APK. The last bit has finally come into effect today, and allows for several benefits such as offline authenticity check, bringing apps to the users's Play Library, and more.

Moving forward, Google will now be adding security metadata on top of each APK to verify that it was officially distributed by Google Play. This change will not require any action or change from the developers or users. Instead, it will be inserted into the APK Signing Block, thus not altering the app's functionality. This metadata is expected to act as a Play badge of authenticity for the Android app.

Google notes on its blog, "One of the reasons we're doing this is to help developers reach a wider audience, particularly in countries where peer-to-peer app sharing is common because of costly data plans and limited connectivity."

As mentioned, this move will also let Google ascertain app authenticity while a device is offline, add those shared apps to a user's Play Library, and manage app updates when the device comes back online. In addition to improving the integrity of Google Play's mobile app ecosystem, it will also give developers new distribution opportunities, and help more people keep their apps on point.

Comments

For the latest tech news and reviews, follow Gadgets 360 on Twitter, Facebook, and subscribe to our YouTube channel.

Further reading: Google, Google Play
Tasneem Akolawala When not expelling tech wisdom, Tasneem feeds on good stories that strike on all those emotional chords. She loves road trips, a good laugh, and interesting people. She ... More
Xiaomi Opens Its 1000th Service Centre in India, Has Presence in Over 600 Cities
Myntra Blink Go Fitness Tracker, Its First Smart Wearable Device, Launched at Rs. 4,199
 
 

Advertisement

 

Advertisement