Hacker News Reader

Is there a way to confirm app publishers are who they say they are?

Once it's available for everybody, what's stopping people from uploading things they don't own?

Right now, it requires manual approval and paperwork/signatures. It's not clear if this will change, as solving the problem you brought up doesn't seem possible.

It can be some system bound to domain names of software developers/vendors (like Let's Encrypt, but for code signing instead of TLS).

Reply on news.ycombinator.com