
Why using SHA1 to check the identification of certificate is safe? That’s a cryptography problem. Please refer to the following authoritative information to check the reason. How do we make sure the updated Apps are real and created by the respective developers? 1. All apps are verified prior to publishing. We make sure that the cryptographic signatures for new versions of all previously published apps match the original ones, which means we know if the new version APKs were signed by the real devs or someone pretending to be them.

