android - 开发者公钥

Question

当您将应用转换市场时，您从开发者页面获得的 key 是否需要在您的应用中进行保护/隐藏？或者如果有人反编译应用程序并获得 key ，什么也不会发生？

Answer 1

谷歌是怎么说的:

To keep your public key safe from malicious users and hackers, do not embed it in any code as a literal string. Instead, construct the string at runtime from pieces or use bit manipulation (for example, XOR with some other string) to hide the actual key. The key itself is not secret information, but you do not want to make it easy for a hacker or malicious user to replace the public key with another key.

来自 here .