Post #3861273

What #identity info is useful for trusting the #developer? If it's a commercial developer(as in: they ask\get more than 0 amount of money for their stuff), then the usual commercial identity info and a public GPG key. Otherwise, just a public GPG key. (here using "GPG key" as catch-all for whatever cryptographic signature system) The issue after all was never about the identity verification itself, but Google\Apple using it to limit access for developers.