SecurityOnlineDdos
Android Sideloading Crackdown: Google to Verify All Apps, But Promises Power-User Bypass
Android sideloading will be tightened with a verification regime that requires apps to undergo identity authentication and code signing before installation outside the Google Play Store, a change Google announced in August and slated to begin next year in select regions. The policy aims to combat fraud, but critics argue it restricts the openness of Android by preventing users from freely installing from any source.
Responding to criticism, Google has revealed an “advanced process” to accommodate experienced users who wish to install unverified applications, promising a dedicated mechanism and more details in the coming months. In the meantime, the plan also includes special account types for students and hobbyists to allow limited distribution of apps to a restricted number of devices.
According to Google, the new verification requirements will force fraudsters to use verifiable identities when distributing malware, raising the difficulty and cost of attacks at scale, though critics note that scammers may still adapt by using stolen credentials and fake accounts.