How to verify POST data is sent from Android app with correct SHA1 signature? : <p>Recently my game has been hacked and one user submitted an impossible score to the server. The score was submitted with a verified checksum, and correct data.</p>

<p>I'm convinced that the user must have reverse engineered my APK file to find the POST request.</p>

<p>Now I wonder what would be a good way to prevent this from happening again and I thought about verifying the SHA1 signature of the app. Maybe this way I can make sure that the app is signed by me, and is not a reverse engineered and changed version of the app.</p>

<p>Would this be possible? Or would there be a better solution to solve this?</p>

<p>I am using LibGDX by the way.</p>
