Hi Experts / Expert Hackers,
I\'m trying to implement the Google Play application silent install feature (similar to appbrain fast web installer) on android.
So
There are several actions that the O.S. will not allow anyone but it's trusted applications to do.
The applications that are signed with platform keys are trusted by the O.S., so those applications can do more things with the phone, like silent installs. I tend to see a platform-signed application more powerful than having root functionality just because it allow you more easy access to intents and android API.
You don't need to sniff the messages that Google Play are sending/receiving from the HTTP Server... You need to sign your application with platform keys. The problem is that each carrier/manufacturer/phone/version could potentially have different platform keys... So, to achieve this you would need to build several versions of your application for each specific device...
Some carriers sign all phones of the same manufacturer with the same keys, but others use different keys for each phone.
You will have to do a big effort and negotiation with carriers to allow this functionality, or rely on ROOT users. Or just release your application signed with test-keys (the ones that come with the android SDK) and it will work with all users that have a custom rom with test-keys.