270
Google plans to begin verifying the identity of all developers who distribute apps on Android, even if it's outside the Play Store, starting September 2026
(android-developers.googleblog.com)
Is there any explanation why this will be effective? Like, "if we find a malware app, we will do this and that to the author's personal data, and it will help you in that way" etc.
What personal data? They will invalidate this dev's cert and ban him from getting a new one.
Should that help people who were unfortunate to install that malware before the dev is banned? Also how exactly do they hope to identify the dev as already banned if he tries to register again?
It doesn't say but it would make sense to check the certs periodically and not just on install.
collapsed inline media
Yeah, how would they verify that uploaded documents are real?
How online banks like Revolut do it? How crypto exchanges do it? How Google's age verification does it? I guess they will do the same.
Don't know about age verification, but revolut and crypto likely require manual review. I can't imagine google relying on the same process and assuming it will help to deter malicious actors.