From 6a1b3041efd010791637fce2663dae9e40e67c87 Mon Sep 17 00:00:00 2001
From: Daniel Micay Updates can be downloaded via
- the releases page and installed via recovery
+ the releases page and installed via recovery
with adb sideloading. The zip files are signed and verified by recovery, just as they
are by the update client within the OS. This includes providing downgrade protection,
which prevents attempting to downgrade the version. If recovery didn't enforce these
@@ -1022,11 +1022,11 @@
enforce using Google certified operating systems. However, app developers can use
it directly and permit other properly signed operating systems upholding the
security model. GrapheneOS has a
-
- detailed guide for app developers on how to support GrapheneOS with the
- hardware attestation API. Direct use of the hardware attestation API provides much
- higher assurance than using SafetyNet so these apps have nothing to lose by using a
- more meaningful API and supporting a more secure OS.Sideloading