Zapstore's avatar
Zapstore _@zapstore.dev 4 months ago
Most people will trust the domain name zapstore.dev, so there's that. Or use the "who signed this file" tool, it's right there in the downloads page. Apologies if Zapstore is not yet the default store on Android.
↑ Parent

Replies (2)

Globe99's avatar
Globe99 globe99@nostrcheck.me 4 months ago
"Who signed this file" links to some API endpoint gobbledygook. What's worse: clicking on it leads to a page that says "certificate expired." "Just trust us" can't be the solution when 100% of smartphone cybersecurity advice for normies is "For the love of God, DON'T INSTALL APPS from unknown sources."
1 replies ↓
↑