I had been running Apollo through Signulous for a year now and it's been working great since I don't have to constantly refresh it.

The registration for the UDID expired and I had to refresh it because Apollo would shutdown as soon as I started it. I reinstalled the apollo app off Signulous since it was still doing that after re-registering, but this new Apollo client off Signulous, requires me to trust an enterprise certificate from China (Tianjin University of Commerce).

I'm a bit skeptical of the safety of doing that and just wondering if others have already done this safely or have a recommendation for an alternate route to install Apollo without having to manually refresh every week.

  • It’s safe

    parent

    [removed]

    parent root

    Facts, literally the only thing a certificate does is lets apps run that are signed by it

    parent root

    Source?

    parent root

    Brain cells that take a moment to learn what app signing is.

    parent root

  • What are you worried could happen by doing this? All it means is that you’re trusting apps signed by the chinese entity to execute on your phone. Since the only one of those you’re installing is a trusted Apollo IPA, I don’t see what you’re worried about. As long as you don’t go deliberately signing and installing malware signed by the same entity you’re fine.

    parent

    Thanks - that clarified it for me!

    parent root

  • The risk isn’t with the signee but with the app being signed. Any sideloaded app could contain malware. A signee just lets iOS run it. You’re effectively mimicking what developers to when developing their own app before it gets published to the App Store.

    parent

  • If you’re so concerned with it, why use it? You can use Sidestore or Sideloadly, none of them are Chinese.

    parent

  • I saw this too I decided to just go back to using AltStore and app containers. I feel more in control now. I’ve been moving my whole life off the cloud, really trying to be self hosted.

    parent