In the past two weeks, Apple has been revoking those abused enterprise certificates, which directly led to the business situation of some third-party app stores. The applications and games installed through these platforms frequently flashed back, could not be verified, could not be installed and so on. Now the situation is that these third-party app stores are silent, because there are no more certificates for them to sign the apps, and because the selling price of certificates is more and more expensive.
Today, I’m going to tell you something about the upstream certificate chain. Careful users may find that every time we install these third-party app stores for the first time, we will always prompt to go to the settings for verification. In this pop-up prompt, the company name of the certificate will be displayed. 99% of the company names are from China.
Yes, the Chinese certificate sellers sell to these third-party application stores. In fact, in China, the certificate sellers have become a hidden industry chain. Most of them recycle the enterprise certificates everywhere, or rent p12 files, and then they raise the price again to sell them to their downstream users, so that the downstream users can increase the price to sell to their own downstream users. It will never stop until the buyer who really needs these certificates to sign the app. For example, these third-party app stores, unfortunately, some third-party app stores also raise the price of the certificate and sell to others after they have got the certificates and signed their own apps. A typical example is “Ignition”, which not only uses it by itself , it also resells certificates.
In this way, a certificate will be sold by many individuals and used by many people, so apple can easily find such a situation, so revocation is inevitable. In addition, the report of some boring people makes the life cycle of the certificate shorter.
Therefore, it is our ordinary users who are ultimately affected. The apps can not be opened within a few hours of each installation, and it needs to be uninstalled and reinstalled again and again. What should we do? Pay to download from the app store? Pay subscription? Or an Android phone?