How can I check that a download is really from findjobs.ge?
Both direct downloads carry fingerprints you can compare yourself. The Apps page lists the values and the exact commands.
Android
- By its contents: work out the SHA-256 digest of the file you downloaded and compare it with the line on the Apps page. It catches a file that was damaged or swapped.
- By its signature, the stronger check: apksigner shows the certificate the app was signed with. It must match our fingerprint, whatever the file is called or wherever you got it.
On Windows, the digest command is certutil -hashfile followed by the file name and SHA256.
Mac
macOS checks this itself on first launch, and you can ask it too: the answer to look for is Notarized Developer ID, with the team identifier the Apps page shows.
Be careful
If the values do not match, do not install the file. Download it again from findjobs.ge, and tell us where you got the other one.