Threema AppVerifier

Goswin

ch.threema.app.libre
05:08:B5:3F:F1:02:B5:38:91:9C:83:4E:9E:6B:6A:FB:A0:46:ED:F6:7E:17:CA:4D:1C:E7:A4:B9:C3:82:37:41

Sorry if I'm missing something obvious here.
But does anyone know where this "fingerprint" (if that's the correct word) can be found so that it can be verified in the AppVerifier app?

leafnose

Goswin
For what it’s worth, you can find this fingerprint here from another Threema user – I have the same fingerprint.
You’ll also find this fingerprint on the F-Droid GitLab, in the metadata for the F-Droid version, under AllowedAPKSigningKeys.
That’s a subpar way of checking, though.

schweizer

It is very rare that app developers provide fingerprints. Threema afaik does not.

Goswin

https://releases.threema.ch/fdroid/repo/

There appears to be one here. Just in a different format I think?
That can't be used on the AppVerifier App thats available on Accrescent

thure

Goswin Strangely, I couldn't find the signature, even though they use reproducible builds with F-Droid. I've asked support if it would be possible to publish the APK signature on their website.

Dumdum

Goswin
That's the signature for their Fdroid repo, not the Threema app.

Goswin

thure

Thanks for the reply. Wasn't sure if I was just being a noob.
Are you aware of any ways to verify using the fingerprint that they do provide?