Updates can be downloaded via - the releases page and installed via recovery + the releases page and installed via recovery with adb sideloading. The zip files are signed and verified by recovery, just as they are by the update client within the OS. This includes providing downgrade protection, which prevents attempting to downgrade the version. If recovery didn't enforce these @@ -1022,11 +1022,11 @@ enforce using Google certified operating systems. However, app developers can use it directly and permit other properly signed operating systems upholding the security model. GrapheneOS has a - - detailed guide for app developers on how to support GrapheneOS with the - hardware attestation API. Direct use of the hardware attestation API provides much - higher assurance than using SafetyNet so these apps have nothing to lose by using a - more meaningful API and supporting a more secure OS.
+ detailed guide for app + developers on how to support GrapheneOS with the hardware attestation API. Direct + use of the hardware attestation API provides much higher assurance than using + SafetyNet so these apps have nothing to lose by using a more meaningful API and + supporting a more secure OS.