BT

Google to Improve Security and Privacy of Google Play Apps

| by Sergio De Simone Follow 17 Followers on Dec 30, 2017. Estimated reading time: 2 minutes |

Android developers will have to comply with two new requirements if they want their apps to be available on Google Play in the future. Those include supporting a recent Android version and adding support for 64-bit native code. Additionally, Google will start including some security metadata to improve APK authenticity verification.

According to Google, the main reason for requiring an app to support a recent API version is benefiting from security and privacy improvements that Google has been incrementally adding to the Android platform. This does not mean developers should stop supporting older Android versions, which is still encouraged. Rather, by targeting recent versions of the Android API, developers can ensure their apps no longer rely on features that were removed at some point, such as implicit intents for bindService, or behaviour that was deemed inappropriate, such as trusting user-added CAs by default or accessing user accounts without explicit approval. Similarly, by targeting recent API versions apps can leverage general improvements to the platform, such as background execution limits to improve battery amd memory usage.

Google will be requiring that new apps published on Google Play from August 2018 target at least API level 26 (Android 8.0) using the targetSdkVersion manifest attribute. The same requirement will be extended to app updates starting November 2018. For the future, the minimum allowed targetSdkVersion will be advanced so apps target the latest Android version within one year from its introduction. According to Google, apps that will not comply with this requirement will be restricted in future Android versions.

The requirement to support 64-bit CPUs only affects apps that include native libraries. Google says that over 40% of currently used Android devices have 64-bit support and that their performance is significantly improved by running 64-bit code. Google Play will still support 32-bit apps and devices, so 64-bit support is to be provided in addition to 32-bit support using a single APK or multiple APKs. Developers have almost two years time to transition to 64-bit, since this requirement will come into effect in August 2019.

Finally, in early 2018 Google will start to automatically add some metadata to each APK to certify it was officially distributed through Google Play. This change does not require any actions on developers’ part and will not affect apps behaviour but will be used in future to enable new distribution opportunities with the aim to help users to keep their apps up to date.

Rate this Article

Adoption Stage
Style

Hello stranger!

You need to Register an InfoQ account or or login to post comments. But there's so much more behind being registered.

Get the most out of the InfoQ experience.

Tell us what you think

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Email me replies to any of my messages in this thread
Community comments

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Email me replies to any of my messages in this thread

Allowed html: a,b,br,blockquote,i,li,pre,u,ul,p

Email me replies to any of my messages in this thread

Discuss

Login to InfoQ to interact with what matters most to you.


Recover your password...

Follow

Follow your favorite topics and editors

Quick overview of most important highlights in the industry and on the site.

Like

More signal, less noise

Build your own feed by choosing topics you want to read about and editors you want to hear from.

Notifications

Stay up-to-date

Set up your notifications and don't miss out on content that matters to you

BT