Skip to content

Commit 6770b00

Browse files
authored
Expand index.md with technical concerns and open source impact
Added sections on technical and security concerns, and impact on open source regarding the developer verification system.
1 parent b81c10a commit 6770b00

File tree

1 file changed

+29
-0
lines changed

1 file changed

+29
-0
lines changed

src/content/pages/en/index.md

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,36 @@ If you are a Google employee or contractor of good conscience and have additiona
7373
- Combat astroturfing: when you encounter suspect posts on community forums and social media in support of the policy (“Well, actually…”), challenge them and do not be shy.
7474
- Help this project out by [editing this page](https://github.com/keepandroidopen/keepandroidopen.github.io/blob/main/src/content/pages/en/index.md) with more useful information.
7575
- [Sign this change.org petition](https://www.change.org/p/stop-google-from-limiting-apk-file-usage/)
76+
-
7677

78+
79+
## Technical and Security Concerns
80+
81+
The developer verification system introduces several technical risks that undermine Android’s existing security model:
82+
83+
- **Private signing key exposure risks**
84+
Android’s security model relies on developers keeping their signing keys secret. Any system requiring proof or artifacts related to those keys creates additional attack surfaces and potential compromise scenarios.
85+
86+
- **Centralized control over software distribution**
87+
A single authority determining which applications may run on certified devices creates a systemic risk. Infrastructure failures, policy changes, or abuse could instantly disable entire categories of software.
88+
89+
- **Reduced resilience of the ecosystem**
90+
Android’s strength historically came from decentralized development and distribution. Removing that property weakens innovation and resilience.
91+
92+
93+
94+
## Impact on Open Source
95+
96+
Many open-source Android applications are developed by volunteers who do not operate commercial developer accounts.
97+
98+
Mandatory identity verification, fees, and registration requirements create barriers that discourage:
99+
100+
- volunteer contributors
101+
- experimental software
102+
- research tools
103+
- privacy-preserving applications
104+
105+
Historically, Android’s openness enabled small developers to build software without needing permission from a central authority. This policy risks eliminating that environment.
77106
### Web Site Owners: Show your support {#webmasters}
78107

79108
[Add the countdown banner to your site](/banner) with a single `<script>` tag — no dependencies, 20 built-in localizations, fully customizable.

0 commit comments

Comments
 (0)