"The company has long required developers of apps sold in its Play store to verify their identities, but spared coders of apps who distribute their efforts elsewhere from that requirement. In August, Google changed that stance and required all developers of Android apps to submit information about their affairs to pass an identity verification process, and to have all their apps digitally signed."
"Google appears to have noticed that protest, as on Wednesday backed down a little from the scheme it announced in August. "We appreciate the community's engagement and have heard the early feedback - specifically from students and hobbyists who need an accessible path to learn, and from power users who are more comfortable with security risks," wrote Matthew Forsythe, Google's Director of product management, Android app safety. "We are making changes to address the needs of both groups.""
"Forsythe described power users as "experienced" and happy to "accept the risks of installing software that isn't verified." Such users will therefore get a new way to install apps that makes it hard for scammers to coerce them into installing software, and will "include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands.""
Google will loosen some recent Android developer registration and app-signing rules but will not rush deployment. Developers selling apps via the Play store already faced identity verification; an August policy extended verification and digital signing requirements to all Android apps, including those distributed outside Play. Google cited malware risks from unknown outside-Play apps. Developer pushback under Keep Android Open prompted a partial retreat. Google plans an opt-in installation flow for experienced power users with clear risk warnings and will gather early feedback before sharing further design and timing details in coming months.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]