The requirements for a system like itunes store or google play are as follows;
- identify and authenticate the user
- determine if the user has paid for a given app
- if s/he has, securely transmit the app and install it on the device
What is the strategy used in this situation? In particular, is the app transmitted in an encrypted format or in plaintext?