I need to setup a bot that check if the public key was changed for each day, then prompt me if the hash looks correct.
Then the app need to download a signed file with just the hash sum automatically without rebuilding.
Why we do this? We need to say: that is the correct server the app is allowed to talk to. So it can never be a middle man.
I need to setup a bot that check if the public key was changed for each day, then prompt me if the hash looks correct.
Then the app need to download a signed file with just the hash sum automatically without rebuilding.
Why we do this? We need to say: that is the correct server the app is allowed to talk to. So it can never be a middle man.