Comments on: Repository Client 0.20 http://f-droid.org/posts/repository-client-0-20/ Free and Open Source Android App Repository Tue, 28 May 2013 04:47:35 +0000 hourly 1 http://wordpress.org/?v=3.5.1 By: CiaranG http://f-droid.org/posts/repository-client-0-20/#comment-496 CiaranG Wed, 16 Feb 2011 15:58:40 +0000 http://f-droid.org/?p=389#comment-496 It is, yes. The index is signed in exactly the same way that an APK is signed. The md5 is just an additional check.

]]> By: Natanael L http://f-droid.org/posts/repository-client-0-20/#comment-495 Natanael L Wed, 16 Feb 2011 15:55:28 +0000 http://f-droid.org/?p=389#comment-495 MD5 sucks. Go with at least SHA256!
Well, it might not be 100% necessary though if the signatures are properly implemented. It is RSA with AT LEAST 2048 bits, right?

]]>