List Signing Certificate Fingerprint to Let Users Verify the Downloaded APK

[deivpaukst]

Describe the feature you'd like
I'm downloading this app using Obtanium and so I would like to make sure that the app I install is indeed the correct one. To do so I use AppVerifier. To be able to check whether the app downloaded is indeed from the developer I would need the hash of the signing certificate used to sign the app.

The hash would be listed preferably on an external site. Like the app's site, but it could also be listed on Github if the external site is not an option.

I've also considered getting the app from Google Play or just hoping that I have indeed acquired the app from the developer. Neither option really resolves the issue for me.

Additional context
It's slowly becoming a standard security practice to list the key's hash somewhere in your project for example: Thunderbird, Molly, AuroraStore, GeoShare.

[BotBlake]

Hi @deivpaukst
Are you aware that the Jellyfin-Android app also releases on F-Droid?
https://f-droid.org/packages/org.jellyfin.mobile/

Maybe thats a good alternative for the time being?
Kind regards.