&gt; I guess Apple didn&#x27;t communicate enough with the developers that they&#x27;ll start using SHA2.<p>Understatement of the year right there. Apple didn&#x27;t communicate this <i>at all</i>. The first time <i>anybody</i> outside of Apple found out about this was when apps started failing to launch.<p>If Apple had merely told developers a month ahead of time, &quot;Hey, we&#x27;re switching to SHA-2 certificates, make sure your receipt validation code handles it,&quot; this whole thing could have been avoided.<p>In a crazy hypothetical world where Apple&#x27;s app store team actually gives a shit about third party developers, they could have even <i>tested</i> SHA-2 certificates against the apps in the store, and directly contacted affected developers to tell them to get stuff fixed.