title: Android: Verifying the application's integrity on the server side
body: <p>I'm writing an Android app that communicates via HTTPS with a server application. On the server side, I have to be absolutely sure about the Android app's integrity. This means that the server app needs to be sure that it's communicating with the Android app that I developed and not with a re-written one (e.g. after decompiling the original app or after having rooted the device).</p>
  
  <p>Is there a possibility to ensure that? Maybe there is a possibility with the signature of the apk file?</p>
  
  <p>Any hint is appreciated.</p>
  
  <p>Regards,
  Peter </p>