All apk install functions will soon be removed

[seremek]

Fist of all - thank you for all your work on Total Commander.
I'm not active user of the app for Android now but I really appreciate your decision about releasing apk with unrestricted version.

Would it be possible to put in FAQ / Installation page short information how to verify Total Commander apk file signature no matter if it was downloaded&installed from your page, google play or any other repository?

I would like to have the same level of trust and security to your application regardless installation channel.

[ghisler(Author)]

The best method to ensure that it's authentic is to first install the Play Store version, and then the download version (with any installer): If the app signatures differ, Android will refuse to install the update.

[seremek]

Some people are not using neither Google Play nor gms services in Android. Verifying application via Play Store is not secure because i cannot check or review incoming application package contents prior installation and abort installation if there is something suspicious.
It also requires extra installer with excess permissions. For example f-droid team see no problem with publishing their public keys to verify apps (https://f-droid.org/en/docs/Release_Channels_and_Signing_Keys/)

I understand your signing keys are the same for both full&GPlay version.Will you participate in Play App Sigining and upload your private keys to google infrastructure?

[ghisler(Author)]

You can verify the signature online here:
https://apkpure.com/apk-signature-verification
It will tell you "APK is the unmodified official version.". The signature (digest) of all my apps displayed there should be
4b54d786e2e5a0ac37440ea8103a900be153d6ca

Will you participate in Play App Sigining and upload your private keys to google infrastructure?

No, one thing I learned early is to NEVER put private keys or passwords in a cloud. Every cloud can be hacked, it's only a question of time.

[Luk164]

Hi everyone, I read the discussion and I wanted to ask why cant we just move the installation functionality into a plugin? It would technically remove it from the main app while still allowing installing from google play. The only annoying thing would be having to install the plugin manually, but still better that having to manually install the entire app and lose automatic updates in the process.

[ghisler(Author)]

Not a plugin, but I moved it to a separate app. Have a look at the top post.

[gpinpin]

The best method to ensure that it's authentic is to first install the Play Store version, and then the download version (with any installer): If the app signatures differ, Android will refuse to install the update.

Hello
Is it for this reason that I can install a beta version (the latest) and not the 333?

[ghisler(Author)]

The beta is newer, so Android will refuse to go back to the 333 because it's older. You can only override this when installing from a PC/Mac with adb, use parameter -d for downgrade:
adb install -r -d apkname.apk

[Zygus]

It is weird because file managers were allowed to provide sideloading from apk, and Google Chrome which is not file manager at all is allowed to download apks from third parties and sideload them.

[ghisler(Author)]

It was decided by a Google AI, and support was not willing to explain what's wrong.

[Hurdet]

Do it have a rss or txt link to check update programmatically?

[ghisler(Author)]

No, please install F-Droid and add my repository to get automatic updates:
https://www.ghisler.com/fdroid.htm

[Hurdet]

Why last version in about config report 4.2d instead of 4.2.
It is confusable.

[white]

Why last version in about config report 4.2d instead of 4.2.

d stands for Download version, which is the full TC version with included APK installer.

[blacky]

No, please install F-Droid and add my repository to get automatic updates:
https://www.ghisler.com/fdroid.htm

hey, geil .. hey rewl !

jetzt erst gesehen, solltest du auf die TC-Androidseite klatchen..so in richtung :

hey, before you download anything else, klick the Homepage from TC-Android,
hey Chris, could you not build up a tc-android.org and then an htaccess on it to the Android page,
then, under the Image where could klick,
an text about F-droid, and a F-droid installer link (then need i not ever add the newest fdroid to the synced files from my self *bG* hrhr)
and under it, the link for the TC-fdroid-Repo
then is all at one page..

then is all together.. and the easyest way for android, with an own tc-android domain..

best
Blacky