[aeonflux]

It doesn't really work even with one closed AppStore. How that could work if they would be forced to allow 3rd party AppStores? I don't understand this logic. On one hand you want to force Apple to allow 3rd patry stores (and apps). But still you want them to have final word in the approval process?

And SSL validates just the domain name, which still allows all the phishing attacks to thrive. Compare installing App for the first time to coming to some website for the first time ever. SSL doesn't really provide anything to identify the site, anyone can get any domain.

[sschueller]

Like Microsoft allows you to sign your app, there should be a mechanism like this for each OS. I can still install an app if it is not signed but I am being warned.